00)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:12 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a4, 0x0) 06:04:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 638.918802][T16339] binder: 16335:16339 ioctl c0306201 20000440 returned -14 06:04:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d30) [ 639.076619][T16348] binder: 16347:16348 ioctl c0306201 20000440 returned -14 06:04:12 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 06:04:12 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='-}\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:04:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d48) 06:04:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d60) [ 639.237947][ T4125] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 639.268909][T16357] binder: 16356:16357 ioctl c0306201 20000440 returned -14 [ 639.497921][ T4125] usb 6-1: Using ep0 maxpacket: 32 [ 639.627986][ T4125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.628040][ T4125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.628083][ T4125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.628116][ T4125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 639.628153][ T4125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 639.628187][ T4125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 639.807904][ T4125] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.807938][ T4125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.807960][ T4125] usb 6-1: Product: syz [ 639.807976][ T4125] usb 6-1: SerialNumber: syz [ 640.078008][ T4125] cdc_ncm 6-1:1.0: bind() failure [ 640.081634][ T4125] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 640.081667][ T4125] cdc_ncm 6-1:1.1: bind() failure [ 640.086862][ T4125] usb 6-1: USB disconnect, device number 32 06:04:14 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 06:04:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, 0x0, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:14 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 06:04:14 executing program 3: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'veth0_vlan\x00', &(0x7f00000003c0)=@ethtool_stats}) 06:04:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d78) 06:04:14 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a8, 0x0) 06:04:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long}, 0x14) [ 640.637606][T16371] binder: 16367:16371 ioctl c0306201 20000440 returned -14 06:04:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d90) 06:04:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:14 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getresuid(&(0x7f000000b480), 0x0, 0x0) read$FUSE(r0, &(0x7f000000b540)={0x2020}, 0x2020) 06:04:14 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x2, 0x0) [ 640.781337][T16385] binder: 16381:16385 ioctl c0306201 20001480 returned -14 [ 640.781668][T16385] binder_alloc: 16381: binder_alloc_buf, no vma [ 640.781887][T16385] binder: 16381:16385 ioctl c0306201 20000440 returned -14 [ 640.927885][ T4125] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 641.187870][ T4125] usb 6-1: Using ep0 maxpacket: 32 [ 641.317988][ T4125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.318028][ T4125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.318068][ T4125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 641.318095][ T4125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 641.318125][ T4125] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 641.318150][ T4125] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 641.499644][ T4125] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.499677][ T4125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.499701][ T4125] usb 6-1: Product: syz [ 641.499719][ T4125] usb 6-1: SerialNumber: syz [ 641.808453][ T4125] cdc_ncm 6-1:1.0: bind() failure [ 641.812392][ T4125] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 641.812425][ T4125] cdc_ncm 6-1:1.1: bind() failure [ 641.836953][ T4125] usb 6-1: USB disconnect, device number 33 06:04:15 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2da8) 06:04:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:15 executing program 0: syz_open_dev$dri(&(0x7f00000001c0), 0x69, 0x0) 06:04:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3], 0x4}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:15 executing program 5: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) 06:04:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0) [ 642.350536][T16399] binder: BINDER_SET_CONTEXT_MGR already set [ 642.350549][T16399] binder: 16395:16399 ioctl 40046207 0 returned -16 06:04:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 06:04:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000080)={0x10, 0x2}, 0x10) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) r4 = dup2(r2, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000000)={r5}, 0x8) [ 642.350852][T16399] binder: 16395:16399 ioctl c0306201 20001480 returned -14 [ 642.351342][T16399] binder: 16395:16399 ioctl c0306201 20000440 returned -14 [ 642.355158][T16398] binder: BINDER_SET_CONTEXT_MGR already set 06:04:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 06:04:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) bind(r0, &(0x7f0000001380)=@in6={0x1c, 0x1c}, 0x1c) 06:04:16 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2dc0) 06:04:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 642.355168][T16398] binder: 16397:16398 ioctl 40046207 0 returned -16 [ 642.355477][T16398] binder: 16397:16398 ioctl c0306201 20001480 returned -14 [ 642.356761][T16398] binder: 16397:16398 ioctl c0306201 20000440 returned -14 [ 642.513456][T16409] binder: 16407:16409 ioctl c0306201 20001480 returned -14 06:04:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x400021, 0x121441) write$snddsp(r0, &(0x7f0000000100)="9d791079cf9617442a286a3be710dfa751527303687c5994db71f87ca45673465750c695180654660d2360726ab12cb5d52709b6a7a8384c94cdd53413a2ecf601052548610aac0b5fa0a4312d0b7a2f26d8e69deb1494e866190e7984cef10aba03766585515b81fca1a19d4ee2d325a053dc7363afbee19bfd5c4f713acef5260309cb91bac6be5c8e85235c384116c1b90388bd8241fb45eb97a618aefa8eb9fe18c7d971d5305021b85387172b2b52b8c0886335374b4fa13e07", 0xfffffed7) r1 = syz_open_dev$sndpcmc(&(0x7f0000000640), 0xb454, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x300) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000280)="6012f6189ca983856cbfeb264b5fef8578a91441d3bf582b8afca2e93bc4455f228c8fe28e4e07c55dd2f2462b5beeb24609fcff9cb16d4f206909e5f349decb1586887166b2c9db086fdb05af5405e4f4a5c8cc9830f8a52a4827dddda745e78d1e65416717475a44d2fbbdc606c31e726d99976a1a3d4472862bcd987fa4bc19970cad7dceef393850c11eefa9ab88b6403463b363a19f0a2fc282814ce875816791d956983fbaebdfffac3c70eb7a27d0777cc6c5c4e7c05663", 0xbb}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x7fff, 0x5, 0x7, 0x84, r0, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x400, 0x0}, 0x8) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x18, 0x6, 0x4, 0x3ff, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1236}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0x0, 0x9, 0x4, 0xfffffffffffffffe, 0x8}, @jmp={0x5, 0x0, 0xc, 0x5, 0x3, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6ce, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x0, 0x9, 0xa, 0x1, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0xfff, 0x15, &(0x7f0000000240)=""/21, 0x41100, 0x2, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xf, 0x2, 0x1}, 0x10, r4, r5, 0x0, &(0x7f0000000580)=[r6]}, 0x80) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f00000001c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 642.513830][T16409] binder_alloc: 16407: binder_alloc_buf, no vma [ 642.516551][T16409] binder: 16407:16409 ioctl c0306201 20000440 returned -14 [ 642.648830][T16421] binder: 16418:16421 ioctl c0306201 20001480 returned -14 [ 642.652662][T16421] binder: 16418:16421 ioctl c0306201 20000440 returned -14 [ 642.812830][T16430] binder: 16428:16430 ioctl c0306201 20001480 returned -14 [ 642.821108][T16430] binder: 16428:16430 ioctl c0306201 20000440 returned -14 06:04:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3], 0x4}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:16 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2dd8) 06:04:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000170a3d"], 0x24}}, 0x0) 06:04:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg2\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:04:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:16 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2df0) 06:04:16 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6800, 0x0) [ 642.956043][T16439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.985729][T16440] binder: 16436:16440 ioctl c0306201 20001480 returned -14 06:04:16 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010e00)="d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010f00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x400fe0}, {0x0}], 0x0, &(0x7f0000014b00)) 06:04:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 642.997334][T16440] binder: 16436:16440 ioctl c0306201 20000440 returned -14 06:04:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:04:16 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010e00)="d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010f00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x400fe0}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000000000100000000d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xc5, 0x404fe0}], 0x0, &(0x7f0000014b00)) [ 643.180158][T16450] binder: 16448:16450 ioctl c0306201 20001480 returned -14 [ 643.181330][T16450] binder: 16448:16450 ioctl c0306201 0 returned -14 [ 643.181573][T16450] binder: 16448:16450 ioctl c0306201 20000440 returned -14 [ 643.412623][ T3773] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 06:04:17 executing program 5: request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) 06:04:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e08) 06:04:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8936, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 06:04:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfed7) 06:04:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3], 0x4}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000035c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'wlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'macvlan0\x00', 'vlan0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1b251a79a2b94d1fa5ee1cacdb4a54c8bc7d8990ccc967ba7d316af64397"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 06:04:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) [ 643.677065][T16459] binder: 16457:16459 ioctl c0306201 20001480 returned -14 [ 643.679105][T16459] binder: 16457:16459 ioctl c0306201 0 returned -14 06:04:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e20) [ 643.679322][T16459] binder: 16457:16459 ioctl c0306201 20000440 returned -14 06:04:17 executing program 5: add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) [ 643.798167][T16471] binder: 16470:16471 ioctl c0306201 20001480 returned -14 06:04:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) 06:04:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 643.842383][T16471] binder: 16470:16471 ioctl c0306201 0 returned -14 [ 643.842630][T16471] binder: 16470:16471 ioctl c0306201 20000440 returned -14 06:04:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 06:04:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e38) [ 643.965138][T16481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 06:04:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, [], [], 'veth0_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @empty, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @empty, @loopback, @remote, @private2, @empty, @dev, @local, @remote, @mcast1, @mcast2]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 644.030746][T16483] binder: 16482:16483 ioctl c0306201 20001480 returned -14 [ 644.033495][T16483] binder: 16482:16483 ioctl c0306201 20000440 returned -14 [ 644.097760][ T6300] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 644.157191][T16488] binder: 16486:16488 ioctl c0306201 20001480 returned -14 [ 644.165527][T16488] binder: 16486:16488 ioctl c0306201 20000440 returned -14 [ 644.182235][T16491] x_tables: duplicate underflow at hook 3 06:04:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[0x0, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_devices(r0, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) 06:04:17 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0, 0x0) [ 644.516057][ T6300] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 644.516092][ T6300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.518231][ T6300] usb 4-1: config 0 descriptor?? [ 644.578078][ T6300] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 645.648070][ T6300] gspca_nw80x: reg_w err -71 [ 645.648128][ T6300] nw80x: probe of 4-1:0.0 failed with error -71 [ 645.654091][ T6300] usb 4-1: USB disconnect, device number 9 06:04:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) 06:04:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e50) 06:04:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f00000005c0)="9c", 0x1, r0) 06:04:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[0x0, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000035c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'wlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'macvlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1b251a79a2b94d1fa5ee1cacdb4a54c8bc7d8990ccc967ba7d316af64397"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 06:04:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') 06:04:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e68) [ 646.209383][T16507] binder: 16501:16507 ioctl c0306201 20001480 returned -14 [ 646.210680][T16507] binder: 16501:16507 ioctl c0306201 20000440 returned -14 06:04:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 06:04:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 646.349098][T16519] binder: 16514:16519 ioctl c0306201 20001480 returned -14 [ 646.356303][T16519] binder: 16514:16519 ioctl c0306201 20000440 returned -14 [ 646.520361][T16526] binder: 16525:16526 ioctl c0306201 20001480 returned -14 [ 646.521681][T16526] binder: 16525:16526 ioctl c0306201 20000440 returned -14 [ 646.567856][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 646.959400][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 646.959437][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.961526][ T27] usb 4-1: config 0 descriptor?? [ 647.008198][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 648.097974][ T27] gspca_nw80x: reg_w err -71 [ 648.098028][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 648.103845][ T27] usb 4-1: USB disconnect, device number 10 06:04:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:22 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0x83b7) 06:04:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e80) 06:04:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='setgroups\x00') write$tcp_congestion(r0, &(0x7f0000000280)='hybla\x00', 0x6) 06:04:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[0x0, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:22 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="05cf0009050607fffcffffff9205e01d001f0202030005ff00940c97ca128e88c10306020294"], 0x35) 06:04:22 executing program 0: add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 06:04:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e98) [ 648.678068][T16533] binder: 16530:16533 ioctl c0306201 20001480 returned -14 [ 648.679463][T16533] binder: 16530:16533 ioctl c0306201 20000440 returned -14 06:04:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x220, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 06:04:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2eb0) [ 648.872024][T16548] binder: 16546:16548 ioctl c0306201 20001480 returned -14 [ 648.873648][T16548] binder: 16546:16548 ioctl c0306201 20000440 returned -14 [ 648.909610][T16550] x_tables: duplicate underflow at hook 2 [ 649.047856][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 649.447889][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 649.447922][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.450068][ T27] usb 4-1: config 0 descriptor?? [ 649.491656][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 650.587865][ T27] gspca_nw80x: reg_w err -71 [ 650.587921][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 650.593276][ T27] usb 4-1: USB disconnect, device number 11 06:04:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:24 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2cc) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) 06:04:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:04:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ec8) 06:04:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) pipe2$watch_queue(&(0x7f0000000440), 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c880}, 0x14000000) 06:04:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:24 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 06:04:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ee0) [ 651.165597][T16563] binder: 16554:16563 ioctl c0306201 20001480 returned -14 [ 651.178300][T16563] binder: 16554:16563 ioctl c0306201 20000440 returned -14 06:04:24 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2cc) 06:04:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 651.293154][T16569] binder: 16567:16569 ioctl c0306201 20001480 returned -14 [ 651.305032][T16569] binder: 16567:16569 ioctl c0306201 20000440 returned -14 [ 651.417464][T16578] binder: 16577:16578 ioctl c0306201 20001480 returned -14 [ 651.429513][T16578] binder: 16577:16578 ioctl c0306201 20000440 returned -14 [ 651.480117][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 651.847878][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 651.847913][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.849864][ T27] usb 4-1: config 0 descriptor?? [ 651.900003][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 652.957939][ T27] gspca_nw80x: reg_w err -71 [ 652.958027][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 652.962366][ T27] usb 4-1: USB disconnect, device number 12 06:04:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:04:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ef8) 06:04:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') 06:04:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000035c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'wlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'macvlan0\x00', 'vlan0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1b251a79a2b94d1fa5ee1cacdb4a54c8bc7d8990ccc967ba7d316af64397"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 06:04:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:27 executing program 5: r0 = socket(0x1e, 0x5, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000040)) 06:04:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 06:04:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f10) [ 653.535238][T16588] binder: 16583:16588 ioctl c0306201 20001480 returned -14 06:04:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) 06:04:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) [ 653.712021][T16600] binder: 16599:16600 ioctl c0306201 20001480 returned -14 [ 653.867874][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 654.279737][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 654.279772][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.281706][ T27] usb 4-1: config 0 descriptor?? [ 654.320151][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 655.197904][ T27] gspca_nw80x: reg_r err -71 [ 655.197960][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 655.204180][ T27] usb 4-1: USB disconnect, device number 13 06:04:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:04:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f28) 06:04:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:29 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3}, 0x10) 06:04:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:29 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 06:04:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$eventfd(r0, 0x0, 0x0) 06:04:29 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 655.747161][T16617] binder: 16610:16617 ioctl c0306201 20001480 returned -14 06:04:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f40) 06:04:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 06:04:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) 06:04:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') read$eventfd(r0, 0x0, 0x0) [ 655.937803][T16628] binder: 16627:16628 ioctl c0306201 20001480 returned -14 [ 655.949038][T16628] binder: 16627:16628 ioctl c0306201 0 returned -14 [ 656.057854][T10690] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 656.418108][T10690] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 656.418144][T10690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.420050][T10690] usb 4-1: config 0 descriptor?? [ 656.459321][T10690] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 657.337839][T10690] gspca_nw80x: reg_r err -71 [ 657.337896][T10690] nw80x: probe of 4-1:0.0 failed with error -71 [ 657.343629][T10690] usb 4-1: USB disconnect, device number 14 06:04:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:04:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f58) 06:04:31 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 06:04:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 06:04:31 executing program 5: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 06:04:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(0x0, 0x0) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001d00fb"], 0x3c}}, 0x0) 06:04:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ipv6_route\x00') read$eventfd(r0, 0x0, 0x0) 06:04:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f70) 06:04:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 657.899730][T16642] binder: 16637:16642 ioctl c0306201 20001480 returned -14 [ 657.901253][T16642] binder: 16637:16642 ioctl c0306201 0 returned -14 06:04:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 06:04:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2f88) [ 658.056839][T16654] binder: 16653:16654 ioctl c0306201 20001480 returned -14 [ 658.068854][T16654] binder: 16653:16654 ioctl c0306201 0 returned -14 [ 658.212362][ T3686] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 658.568672][ T3686] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 658.568717][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.570619][ T3686] usb 4-1: config 0 descriptor?? [ 658.609422][ T3686] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 659.488481][ T3686] gspca_nw80x: reg_r err -71 [ 659.488536][ T3686] nw80x: probe of 4-1:0.0 failed with error -71 [ 659.490535][ T3686] usb 4-1: USB disconnect, device number 15 06:04:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:33 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id, 0x10) 06:04:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x120, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"2de7"}}, @common=@inet=@udp={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 06:04:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(0x0, 0x0) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2fa0) 06:04:33 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x21000968) 06:04:33 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x220a40, 0x0) [ 660.013673][T16664] x_tables: duplicate underflow at hook 2 06:04:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2fb8) [ 660.064692][T16670] binder: 16666:16670 ioctl c0306201 20001480 returned -14 06:04:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2fd0) 06:04:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000006d00)=@newtfilter={0x8004, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9}, {0x5f14, 0x2, [@TCA_RSVP_ACT={0x6f0, 0x6, [@m_police={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}]]}, {0x79, 0x6, "e17b32fa95ab19330e481e7dad71607d405683db92f5e262710980c3001baeb1a33ab1ac83cf332e7b8d2a1173429d7e9e135f083f113079c264790cf015479edfd5480e168df71c9ffcaf088898975d57c9a2ec16a36868c0e8ddf52a4f4b0a80a779fd27b7ca410d7774631375de6c36223f2b6d"}, {0xc}, {0xc}}}, @m_skbedit={0x158, 0x0, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0xb9, 0x6, "8b5143580c59e1bce77833d24134fac0c1f9ea38bb94f68de7d8495f2c2400db92aece80311a7c4813d1beee084be870d1d20f61e568b51de2b683638946b57b2c1e8f9f60852e3164aaa2b8d444aa1d7188ecf8cad7e9c0797f5e1327a1182c2ff5f85cc5539e3e101c03acafa922a94d181b4078d341932543dd815e7f3e7103743acb3dbebfdac14e0aa9b21aaad68e08e7cd6fb69f0b4fbc9f11a68536408be0a2059a4d67f7698b8ea1b2ad7c7357bd25c22c"}, {0xc}, {0xc}}}, @m_csum={0x108, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x69, 0x6, "4f4d4699b59a090772c59664bc84a939bc1f894f92288bde26b76e2a2c040c4b36343dd4c3e816e83cea01fbfb3b3c7445b32e23fa0d37f24797b5e1dac02ac14ce068b4acca371b58c68f26df8703322fc5687032e3776c417b54f9bd1a1ea66ca43a2f5c"}, {0xc}, {0xc}}}, @m_sample={0xbc, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x85, 0x6, "d8db84c5c6b95e578bdea24e2de4098c12dd2eac1be0811782baa6f696159864619e72577b7dd38174c61d0169e14caa7246390ce40bb86a09fa1daf98fbd176ab2e7432331a0310e955b1681a233b17cac1cbb2e20a1009c6b40af5ae631f0588bee6f2774397a6c5a2ec5e569ed60db31c6f415953d6feca8c8a3a7c9bdee08d"}, {0xc}, {0xc}}}, @m_csum={0x19c, 0x0, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x8d, 0x6, "e38a8e7693dba842fc3b6893523f32fd94d7fb234d1638e0e43849006f91af6e48fbd9e54211f0221bb325b7b3e5ba49cbfbceb5ee330e87bfac2441d3476d4e669dcf3c7e2599ab1ef817ccf04426f3d795cbeff6eb03759bf3d7c3f8fd81841ba58d93eced5e3a9984f932a3ac269ada32cea08683d4dad96e1923fd3837ac430d98f54eea4c67cf"}, {0xc}, {0xc}}}, @m_vlan={0x184, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xc9, 0x6, "ce5a595792e20021490fe8b44ab58f179c3e16010ea61b4c3ef13d3c5042a18809cf22f6421eea08c3ab36b05c7556e635d94f1c58040ce2b6cb7b8320700ffb00500d5af35751e0b6af72c0820abef86d0e71246c7fe295596981c1622b53fdb9143d28ea9670727776bb9ed01799583979032036e39d2001cd684ae1070dd111bc9f821fbcbf5558df7c2b018679e10bf690ca0b676aa39216699f86fc421a01ff9cd83682fdaf4ae8f1b38b241d7226da3d6838d6b303d8e84676ca44037a7932f1afc2"}, {0xc}, {0xc}}}]}, @TCA_RSVP_ACT={0x4764, 0x6, [@m_mpls={0x88, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}]}, {0x1d, 0x6, "a46a429eac76a8342625f2673a844d9af124e1f5a6461e677a"}, {0xc}, {0xc}}}, @m_skbmod={0x100, 0x0, 0x0, 0x0, {{0xb}, {0xd0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev}, @TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x5, 0x6, '\t'}, {0xc}, {0xc}}}, @m_xt={0xb4, 0x0, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x61, 0x6, "a95555067bfe05dfb16794266960c9c4e2c04eb49db3e530c75b63b18f5e2beca791cfd5ffdf26bffda00ea8fd193e2b26092a7e9eb13bf610df7c2650c186407fc00c19e576337b165b744e078addb63d7280cdeb9456ec337c7b87e3"}, {0xc}, {0xc}}}, @m_police={0x428c, 0x0, 0x0, 0x0, {{0xb}, {0x4210, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x51, 0x6, "d9cb88a948ba9af4a00519fec98efaf2af4082f185bcecc00ccabf9dcfb9d06d11996224fcd51d6297abb10c747bfbdb3370c5ca16c2339a74be8a288ba7633007bce4fedaf9bb63bd6927bf6f"}, {0xc}, {0xc}}}, @m_xt={0x64, 0x0, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8}]}, {0x29, 0x6, "91f0d2e0c74f988daa93cca3ae690b71be40459c2af6c9385ee68c370f915c74f1aa30ebd9"}, {0xc}, {0xc}}}, @m_sample={0xc8, 0x0, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x51, 0x6, "f3d9dccadbf96bd10a11f09d8510c2b811c5e90ca9a542fe2a5ceb073bdbecd49ee390bcd609d68b4e507267d784548712406c0c87285fc11b5e2839f31b226d2f76877b28c64ab78f5867750f"}, {0xc}, {0xc}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x25, 0x6, "93d11e9d570c2afbedf3a229a5337c3ef74cb8082da160360d987fb19f33793251"}, {0xc}, {0xc}}}, @m_mirred={0x78, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x29, 0x6, "beca1ebb5d22e07c887fd7836fcea2171c8cf496b9475068d079160081a02098bfe8c530f1"}, {0xc}, {0xc}}}, @m_vlan={0x84, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x11, 0x6, "a5bd8166dff65791803060558a"}, {0xc}, {0xc}}}]}, @TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_POLICE={0xc54, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c}]}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_POLICE={0x428, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}]}, @TCA_RSVP_PINFO={0x20}]}}, @filter_kind_options=@f_rsvp={{0x9}, {0x10bc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8, 0x3, @dev}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_POLICE={0x1078, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}]}, @TCA_RSVP_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xfcc, 0x2, [@TCA_ROUTE4_ACT={0xfc8, 0x6, [@m_mirred={0xfc4, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xf95, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x8004}}, 0x0) 06:04:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000002f80)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) [ 660.347866][ T3686] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 660.708113][ T3686] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 660.708151][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.710057][ T3686] usb 4-1: config 0 descriptor?? [ 660.750037][ T3686] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 661.627825][ T3686] gspca_nw80x: reg_r err -71 [ 661.627879][ T3686] nw80x: probe of 4-1:0.0 failed with error -71 [ 661.633557][ T3686] usb 4-1: USB disconnect, device number 16 06:04:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:35 executing program 0: r0 = syz_io_uring_setup(0x42d5, &(0x7f0000001800), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) 06:04:35 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'}) 06:04:35 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2fe8) 06:04:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(0x0, 0x0) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r1, 0x309}, 0x14}}, 0x0) 06:04:35 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3000) [ 662.196623][T16695] binder: 16689:16695 ioctl c0306201 20001480 returned -14 06:04:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x300}, 0x0) 06:04:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x28, r1, 0x80b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x28}}, 0x0) 06:04:35 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3018) 06:04:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x18, r1, 0x80b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4, 0x6}]}, 0x18}}, 0x0) [ 662.404614][T16710] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 662.527770][T10690] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 662.917985][T10690] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 662.918030][T10690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.919984][T10690] usb 4-1: config 0 descriptor?? [ 662.959590][T10690] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 663.827810][T10690] gspca_nw80x: reg_r err -71 [ 663.827865][T10690] nw80x: probe of 4-1:0.0 failed with error -71 [ 663.833713][T10690] usb 4-1: USB disconnect, device number 17 06:04:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:37 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3030) 06:04:37 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x80}, 0x0, &(0x7f0000000080)={0x7}, 0x0, 0x0) 06:04:37 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x80}, 0x0, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0) 06:04:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6, 0x2, 0x0, 0x1}, 0x48) 06:04:37 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$pppoe(r0, 0x0, 0x0) [ 664.371394][T16718] binder: 16717:16718 ioctl c0306201 20001480 returned -14 06:04:38 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3048) 06:04:38 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa, 0x18, 0x2, [@array]}}, &(0x7f0000000840)=""/173, 0x32, 0xad, 0x1}, 0x20) 06:04:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 06:04:38 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3060) [ 664.698049][T13889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 665.057909][T13889] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 665.057946][T13889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.059555][T13889] usb 4-1: config 0 descriptor?? [ 665.100313][T13889] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 665.186414][T16718] binder: 16717:16718 ioctl c0306201 20000440 returned -14 [ 665.977905][T13889] gspca_nw80x: reg_r err -71 [ 665.977961][T13889] nw80x: probe of 4-1:0.0 failed with error -71 [ 665.984828][T13889] usb 4-1: USB disconnect, device number 18 06:04:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:40 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x1000, 0x4) 06:04:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x13}]}}, &(0x7f0000000840)=""/173, 0x32, 0xad, 0x1}, 0x20) 06:04:40 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3078) 06:04:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:40 executing program 0: pselect6(0x40, &(0x7f00000002c0)={0x4}, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0) 06:04:40 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x494401, 0x0) 06:04:40 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3090) [ 666.532730][T16746] binder: 16740:16746 ioctl c0306201 20001480 returned -14 06:04:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5d94694241083986867054e249fd8ebe30375e90036cdbf1c6b3bd27b1b6bfa6cdb0d4bb77d1804b5d5cce8f72f9e15c0ad7113bbb67180c1a99261b02acb155", "5645c32599684d8c2356dc055533a9440a2d7f96e1dc319d86c622e89d74efd2"}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:04:40 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) 06:04:40 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30a8) [ 666.827994][ T6302] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 667.230818][ T6302] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 667.230854][ T6302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.232833][ T6302] usb 4-1: config 0 descriptor?? [ 667.280050][ T6302] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 667.707801][ T6302] gspca_nw80x: reg_r err -32 [ 667.707858][ T6302] nw80x: probe of 4-1:0.0 failed with error -32 06:04:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x7}) 06:04:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30c0) 06:04:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:43 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ppoll(&(0x7f0000000c40)=[{r0, 0xa444}, {r0}], 0x2, 0x0, 0x0, 0x0) 06:04:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) [ 669.544623][T13897] usb 4-1: USB disconnect, device number 19 06:04:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x18, r1, 0x80b, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) 06:04:43 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1000000, 0x0, 0x0, 0x2}}, &(0x7f0000000840)=""/173, 0x1a, 0xad, 0x1}, 0x20) 06:04:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30d8) [ 669.609478][T16768] binder: 16766:16768 ioctl c0306201 20001480 returned -14 06:04:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25200000000c00060003000000030000000c000600010000000100000014002280080003000400000005"], 0x8c}}, 0x0) 06:04:43 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x2, 0x0, 0x0) 06:04:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) [ 669.750343][T16782] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. 06:04:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30f0) 06:04:43 executing program 5: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$damon_attrs(r0, 0x0, 0x0) 06:04:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 670.027921][T13897] usb 4-1: new high-speed USB device number 20 using dummy_hcd 06:04:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:04:43 executing program 0: r0 = syz_io_uring_setup(0x42d5, &(0x7f0000001800), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 670.387910][T13897] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 670.387942][T13897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.389296][T13897] usb 4-1: config 0 descriptor?? [ 670.430735][T13897] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 670.504665][T16800] binder: 16799:16800 ioctl c0306201 20001480 returned -14 [ 670.867818][T13897] gspca_nw80x: reg_r err -32 [ 670.867876][T13897] nw80x: probe of 4-1:0.0 failed with error -32 06:04:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:46 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3108) 06:04:46 executing program 5: r0 = syz_io_uring_setup(0x588a, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x6090, 0x0, 0x0, 0x0, 0x0) 06:04:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:46 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) 06:04:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) [ 672.625962][ T4125] usb 4-1: USB disconnect, device number 20 06:04:46 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3120) 06:04:46 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x1000000) [ 672.693389][T16808] binder: 16804:16808 ioctl c0306201 20001480 returned -14 06:04:46 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 06:04:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 06:04:46 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3138) 06:04:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) [ 672.864839][T16819] binder: 16817:16819 ioctl c0306201 20001480 returned -14 [ 673.004462][T16823] binder: 16822:16823 ioctl c0306201 20001480 returned -14 [ 673.138009][ T4125] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 673.497948][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 673.497983][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.500587][ T4125] usb 4-1: config 0 descriptor?? [ 673.540154][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 673.977860][ T4125] gspca_nw80x: reg_r err -32 [ 673.977913][ T4125] nw80x: probe of 4-1:0.0 failed with error -32 [ 674.439833][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 06:04:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:49 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 06:04:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3150) 06:04:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x1000000) 06:04:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, &(0x7f00000014c0)}) 06:04:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 675.734971][ T6300] usb 4-1: USB disconnect, device number 21 06:04:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x1000000) 06:04:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3168) [ 675.803679][T16836] binder: 16832:16836 ioctl c0306201 20001480 returned -14 06:04:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, &(0x7f00000014c0)}) 06:04:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3180) 06:04:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, &(0x7f00000014c0)}) [ 676.003222][T16847] binder: 16844:16847 ioctl c0306201 20001480 returned -14 06:04:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3198) [ 676.166544][T16849] binder: 16848:16849 ioctl c0306201 20001480 returned -14 [ 676.238105][ T6300] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 676.598660][ T6300] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 676.598696][ T6300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.601227][ T6300] usb 4-1: config 0 descriptor?? [ 676.640098][ T6300] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 677.077888][ T6300] gspca_nw80x: reg_r err -32 [ 677.077946][ T6300] nw80x: probe of 4-1:0.0 failed with error -32 06:04:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) write$damon_attrs(r0, 0x0, 0x0) 06:04:52 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x31b0) 06:04:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10d443, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x1, 0x10, r0, 0x0) 06:04:52 executing program 5: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x11}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000040)={0x800}, 0x0) [ 678.823407][T13889] usb 4-1: USB disconnect, device number 22 06:04:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 06:04:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x30}}, 0x0) 06:04:52 executing program 5: syz_io_uring_setup(0x2b9b, &(0x7f0000000000), &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) [ 678.875021][ T28] audit: type=1800 audit(1652853892.424:173): pid=16859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1177 res=0 errno=0 06:04:52 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x31c8) 06:04:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001200)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 06:04:52 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6195, &(0x7f0000000680), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000700), 0x0) 06:04:52 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000001c40), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000006580)={[{@size={'size', 0x3d, [0x4b]}}]}) [ 679.377987][T13889] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 679.768714][T13889] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 679.768751][T13889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.773354][T13889] usb 4-1: config 0 descriptor?? [ 679.820377][T13889] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 680.258026][T13889] gspca_nw80x: reg_r err -32 [ 680.258089][T13889] nw80x: probe of 4-1:0.0 failed with error -32 06:04:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:55 executing program 4: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2c, 0x32]}}}}]}) 06:04:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x31e0) 06:04:55 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:55 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6195, &(0x7f0000000680), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:04:55 executing program 5: keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f00000004c0)="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", 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3f00, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1, 0x5ab6}, {&(0x7f0000000480)='b', 0x1, 0xfffffffb}], 0x0, 0x0) [ 681.873161][T13889] usb 4-1: USB disconnect, device number 23 06:04:55 executing program 4: r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x9, 0x7, 0x7, 0x7, 0x40, 0x1000}) socket$inet(0x2, 0xa, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) ptrace$setsig(0x4203, r0, 0x40, &(0x7f0000000140)={0x1e, 0x9, 0x80000000}) rt_tgsigqueueinfo(r0, r0, 0x2f, &(0x7f00000001c0)={0x16, 0x7c3, 0x2}) r1 = gettid() ioprio_set$pid(0x2, r1, 0x0) r2 = getpid() ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000000240)={0x10, 0x9, 0x6c}) r3 = socket$inet(0x2, 0xa, 0x8) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000340)='ns/cgroup\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000026c0)={&(0x7f00000003c0)={0x22c8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "990db1551a1a77f5da6c90d94f35fddba4189fcdf2ab5c9b7159cebda2db565117686bbae2a1a7da26fa87c91fd0634f89eb64a3527b4f98620c61a677016f553a46a1b0e73289f909"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "7fe297d743ba0a9c04d070fe2251c17f8eadae0daaa559ae9dd2c5ccac473431ea569858dc3b7d3cad9d2836e91b3741f6b3ac4aa3b724a57cf7ec743b17095e4cfe6dfd38bbc241d37e199b4c7ca413143f19c022802c29"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "2227459032d9cbce73c68a9662796bf9e4d66a7e78a2e19d5582886a8bd7b2bfc073e15996eca40b87cc5c5ccb7379b42cef946992ec7f015f94935ad278c4277145efad506c03f9e4aed4dc79ccefcef82d0f68e421659616d8a0653ae32107973cab696eb75720a9666a5f9d2a3d66cfd92b"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x784f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@[(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "f2cd553e12eb99afbfa6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "8538d59c1ee4eaa3be4a7e7f11c891fbc5d7308c041257c707ad99f6fbeb7cace25e99e14601d4b0f29ffa87d58360bea318bada2cbeef843e1f51fdad6a770852d51d21922e2aff199dd90c1926b2a5e8b8bd570e056b8478e8745e887dea5cbccbb0f149c5e716c1cc2d9df5af57116702e34aca25bd664827596c064ae396c2c853e83d2f697671f4091dda9755ad72591fc56b110c5cb1bf42dade598f32faecc901bb7ed78ff3"}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "765af57799c42aac73c20e283b567d28d25f83754dc12b23ef9d86b56317cea974a1d36b671e680b8fc297dc046e6c060297"}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x22c8}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) syz_genetlink_get_family_id$mptcp(&(0x7f0000002740), 0xffffffffffffffff) [ 681.920359][T16887] tmpfs: Bad value for 'mpol' 06:04:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x9}}, 0x0) 06:04:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x31f8) [ 682.045639][T16895] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 06:04:55 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1000000007"], 0x10}}], 0x1, 0x0) 06:04:55 executing program 0: syz_io_uring_setup(0x7602, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4591, &(0x7f0000000100), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x7602, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4591, &(0x7f0000000100), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 06:04:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3210) [ 682.357875][T13889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 682.397221][T16888] loop5: detected capacity change from 0 to 264192 [ 682.718054][T13889] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 682.718090][T13889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.719978][T13889] usb 4-1: config 0 descriptor?? [ 682.760066][T13889] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 683.197805][T13889] gspca_nw80x: reg_r err -32 [ 683.197862][T13889] nw80x: probe of 4-1:0.0 failed with error -32 06:04:58 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:58 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) 06:04:58 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3228) 06:04:58 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1382, 0x0) 06:04:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:58 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f0000000580)=@bloom_filter, 0x48) [ 684.959979][ T6302] usb 4-1: USB disconnect, device number 24 06:04:58 executing program 0: socketpair(0x68, 0x0, 0x0, &(0x7f0000000000)) 06:04:58 executing program 4: r0 = io_uring_setup(0x5f6b, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 06:04:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 06:04:58 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3240) 06:04:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x125e, 0x0) 06:04:58 executing program 0: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xc, 0x7, 0x0) [ 685.492158][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 06:04:59 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3258) 06:04:59 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x8000000) 06:04:59 executing program 0: syz_emit_ethernet(0x11, &(0x7f0000000000)={@empty, @local, @void, {@llc={0x4, {@llc={0x0, 0x0, "83"}}}}}, 0x0) 06:04:59 executing program 5: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x101a02, 0x0) 06:04:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1268, 0x0) 06:04:59 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7f, 0x0) 06:04:59 executing program 4: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)='[[\x00', 0x0) 06:04:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3270) 06:04:59 executing program 5: syz_emit_ethernet(0xe0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100380088"], 0x0) 06:04:59 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000002c0)) 06:04:59 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:04:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3288) 06:04:59 executing program 5: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xd, 0x0, 0x0) 06:04:59 executing program 4: timer_create(0x7, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_gettime(0x0, &(0x7f0000000280)) 06:04:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tun(r0, 0x0, 0x17c) 06:04:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:04:59 executing program 0: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 06:04:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 06:04:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:04:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x32a0) 06:04:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x80041284, 0x0) 06:04:59 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) 06:05:00 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:00 executing program 5: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 06:05:00 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x32b8) 06:05:00 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000440), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 06:05:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x381900) 06:05:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:00 executing program 5: io_uring_setup(0x4620, &(0x7f0000000000)={0x0, 0x0, 0x12}) 06:05:00 executing program 0: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x10000000) 06:05:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10001) 06:05:00 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x32d0) 06:05:00 executing program 5: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 06:05:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x125f, 0x0) 06:05:00 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x32e8) 06:05:00 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:00 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4601, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 06:05:00 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9f6ae30a970c43e9cdb60de6637a1c56d135d6c75d2c2f22e6381fa8aa506178"}) 06:05:00 executing program 4: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x11, 0x0, 0x0) 06:05:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:01 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 06:05:01 executing program 5: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$damon_contexts(r0, 0x0, 0x0) 06:05:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x181001, 0x0) write$tun(r0, 0x0, 0x0) 06:05:01 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3300) 06:05:01 executing program 5: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:05:01 executing program 0: select(0x40, &(0x7f0000000040)={0x6}, &(0x7f0000000080)={0x100}, 0x0, &(0x7f0000000180)) 06:05:01 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x5, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) 06:05:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1274, 0x0) 06:05:01 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3318) 06:05:01 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:01 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) 06:05:01 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40a2012, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:05:01 executing program 0: syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x1) [ 688.072736][T17053] random: crng reseeded on system resumption 06:05:01 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) syz_io_uring_setup(0x2b24, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 06:05:01 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3330) 06:05:01 executing program 0: syz_io_uring_setup(0x5a1d, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x33d2, &(0x7f0000000440)={0x0, 0x58d1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 06:05:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, 0x0) 06:05:01 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) syz_io_uring_setup(0x2b24, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 06:05:02 executing program 5: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x86200, 0x0) 06:05:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:02 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3348) 06:05:02 executing program 5: syz_io_uring_setup(0x5a1d, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:05:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4601, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)) 06:05:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:02 executing program 0: syz_io_uring_setup(0x2fc8, &(0x7f00000000c0), &(0x7f0000404000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 06:05:02 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 06:05:02 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) 06:05:02 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3360) 06:05:02 executing program 5: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) 06:05:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x347, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 06:05:02 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3378) [ 689.018037][T13897] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 689.208042][T13897] usb 4-1: device descriptor read/64, error 18 [ 689.478023][T13897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 689.667745][T13897] usb 4-1: device descriptor read/64, error 18 [ 689.789885][T13897] usb usb4-port1: attempt power cycle [ 690.197766][T13897] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 690.287909][T13897] usb 4-1: Invalid ep0 maxpacket: 0 [ 690.437769][T13897] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 690.528621][T13897] usb 4-1: Invalid ep0 maxpacket: 0 [ 690.528832][T13897] usb usb4-port1: unable to enumerate USB device 06:05:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:05 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 06:05:05 executing program 5: socketpair(0x1, 0x0, 0x4, &(0x7f00000001c0)) 06:05:05 executing program 4: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xc, 0x0, 0x0) 06:05:05 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3390) 06:05:05 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, 0x0, 0x0, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:05 executing program 5: timer_create(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 06:05:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000080)) 06:05:05 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe}, 0x0) 06:05:05 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x33a8) 06:05:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9800}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}}, 0x0) 06:05:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1d, 0x1}, 0x1c}}, 0x0) [ 692.128365][ T6302] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 692.317741][ T6302] usb 4-1: device descriptor read/64, error 18 [ 692.589197][ T6302] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 692.787789][ T6302] usb 4-1: device descriptor read/64, error 18 [ 692.907970][ T6302] usb usb4-port1: attempt power cycle [ 693.337934][ T6302] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 693.437980][ T6302] usb 4-1: Invalid ep0 maxpacket: 0 [ 693.599247][ T6302] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 693.697784][ T6302] usb 4-1: Invalid ep0 maxpacket: 0 [ 693.697988][ T6302] usb usb4-port1: unable to enumerate USB device 06:05:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x14}, 0x48) 06:05:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x33c0) 06:05:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) execveat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000340)='-\x00', &(0x7f0000000380)='/dev/bsg\x00', &(0x7f00000003c0)='#{-)\x00', &(0x7f0000000400)='syz0\x00', &(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000480)='syz0\x00', &(0x7f00000004c0)='*$$\x00', &(0x7f0000000500)='syz0\x00'], 0x0) 06:05:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, 0x0, 0x20000246}, 0x0) 06:05:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, 0x0, 0x0, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21}}]}, 0x24}}, 0x0) 06:05:08 executing program 5: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000040)=""/4096) 06:05:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x33d8) 06:05:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 06:05:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x33f0) 06:05:08 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) [ 695.330677][ T6302] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 695.527889][ T6302] usb 4-1: device descriptor read/64, error 18 [ 695.808103][ T6302] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 696.007779][ T6302] usb 4-1: device descriptor read/64, error 18 [ 696.128180][ T6302] usb usb4-port1: attempt power cycle [ 696.558347][ T6302] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 696.657856][ T6302] usb 4-1: Invalid ep0 maxpacket: 0 [ 696.807915][ T6302] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 696.909172][ T6302] usb 4-1: Invalid ep0 maxpacket: 0 [ 696.910377][ T6302] usb usb4-port1: unable to enumerate USB device 06:05:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:11 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 06:05:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x9, 0x80, 0x8, 0x8}, 0x48) 06:05:11 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3408) 06:05:11 executing program 4: socket(0x10, 0x2, 0x203) 06:05:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, 0x0, 0x0, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f0000000d40)={'gretap0\x00', 0x0}) 06:05:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x205, 0x1}, 0x48) 06:05:11 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xfab2a0e86f636511, 0x0) 06:05:11 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3420) 06:05:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0, 0x1200}, 0x6}, 0x0) 06:05:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x9, 0x80, 0x8, 0xa462, 0x50}, 0x48) [ 698.368113][ T7692] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 698.728064][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 698.728099][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.729580][ T7692] usb 4-1: config 0 descriptor?? [ 698.770004][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 699.207972][ T7692] gspca_nw80x: reg_r err -32 [ 699.208031][ T7692] nw80x: probe of 4-1:0.0 failed with error -32 06:05:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000006e000000000001000000080005000100000008000100264a"], 0x24}}, 0x0) 06:05:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3438) 06:05:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0) 06:05:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, 0x0, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x9, 0x80, 0x8, 0xa462}, 0x48) [ 700.983406][ T7692] usb 4-1: USB disconnect, device number 37 06:05:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r0, 0x0, 0x0) 06:05:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newrule={0x10, 0x20, 0x1}, 0x1c}}, 0x0) 06:05:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3450) 06:05:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 06:05:14 executing program 5: syz_io_uring_setup(0x3aea, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1115, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x363}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 06:05:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3468) [ 701.508033][ T7692] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 701.877884][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 701.877920][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.879901][ T7692] usb 4-1: config 0 descriptor?? [ 701.920141][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 702.348023][ T7692] gspca_nw80x: reg_r err -32 [ 702.348087][ T7692] nw80x: probe of 4-1:0.0 failed with error -32 06:05:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x8}, 0x48) 06:05:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3480) 06:05:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000200)) 06:05:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, 0x0, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 704.081575][ T27] usb 4-1: USB disconnect, device number 38 06:05:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000011c0)=[{&(0x7f0000000080)='L', 0x1, 0x8000}, {&(0x7f00000000c0)="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", 0x926, 0x6db}], 0x8019, &(0x7f0000001240)={[{@nodots}], [{@hash}]}) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x0) 06:05:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3498) 06:05:17 executing program 4: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000240)) syz_clone(0x40000000, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5e0564492d8fbb169407c3aee416134d2c29fb5494a3a58d667688f27a9e9e3002354a1acd09e714f4b2e396a15fe5225e4408f975f3753bafc16d980275e2dfa997891946156ec8914f6040c6c273811197403562866ccb7c4bef87b8451f6de7e31ca4b28250ca133a97b56c8f1c35a976c148354f0928bc8058") 06:05:17 executing program 5: syz_clone(0xa4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:05:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x34b0) 06:05:17 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 704.252950][T17223] loop0: detected capacity change from 0 to 128 [ 704.537796][ T27] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 704.898341][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 704.898363][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.899632][ T27] usb 4-1: config 0 descriptor?? [ 704.940208][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 705.364575][ T4381] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 705.377869][ T27] gspca_nw80x: reg_r err -32 [ 705.377924][ T27] nw80x: probe of 4-1:0.0 failed with error -32 06:05:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c7"], 0x14}}, 0x0) 06:05:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x34c8) 06:05:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xff, &(0x7f0000000040)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 06:05:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, 0x0, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:20 executing program 4: syz_mount_image$romfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{}]}) [ 707.159073][ T7692] usb 4-1: USB disconnect, device number 39 06:05:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40086602, 0x0) 06:05:20 executing program 5: r0 = io_uring_setup(0x5d77, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000240)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 06:05:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x34e0) 06:05:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3}]}]}, 0x2c}}, 0x0) 06:05:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x34f8) 06:05:20 executing program 5: r0 = socket(0x11, 0xa, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) [ 707.687944][ T7692] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 708.077959][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 708.077993][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.079889][ T7692] usb 4-1: config 0 descriptor?? [ 708.130289][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 708.557822][ T7692] gspca_nw80x: reg_r err -32 [ 708.557876][ T7692] nw80x: probe of 4-1:0.0 failed with error -32 06:05:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter, 0x48) 06:05:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 06:05:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000001400)=0x16) 06:05:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3510) 06:05:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, 0x0}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 710.287446][ T6302] usb 4-1: USB disconnect, device number 40 06:05:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x125e) 06:05:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x2f) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x130, 0x218, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffc, 0x5}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000104000100"/20, @ANYRES32=r2, @ANYBLOB="8a"], 0x20}}, 0x0) 06:05:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 06:05:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3528) 06:05:24 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), 0x4) 06:05:24 executing program 0: r0 = socket(0x2, 0x3, 0x1f) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) [ 710.510907][T17285] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 710.757053][T17285] syz-executor.5 (17285) used greatest stack depth: 21968 bytes left [ 710.807852][ T6302] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 711.188098][ T6302] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 711.188133][ T6302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.191815][ T6302] usb 4-1: config 0 descriptor?? [ 711.231373][ T6302] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 711.668002][ T6302] gspca_nw80x: reg_r err -32 [ 711.668061][ T6302] nw80x: probe of 4-1:0.0 failed with error -32 06:05:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3540) 06:05:26 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 06:05:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x0, 0x0, 0x37ad}, 0x48) 06:05:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x35}, {}]}) 06:05:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, 0x0}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:26 executing program 4: syz_io_uring_setup(0x6247, &(0x7f0000000100), &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x77d5, &(0x7f0000000040), &(0x7f0000002000/0x5000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) [ 713.365338][T13897] usb 4-1: USB disconnect, device number 41 06:05:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="bbd3e8ec8a7224a5880ea82b5097aa12", 0x10) 06:05:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}) 06:05:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3558) [ 713.527274][ T28] audit: type=1326 audit(1652853927.074:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17307 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa64fe890e9 code=0x0 06:05:27 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tun(r0, 0x0, 0x25d) 06:05:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, 0x0}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 713.877894][T13897] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 714.238040][T13897] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 714.238106][T13897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.240074][T13897] usb 4-1: config 0 descriptor?? [ 714.280129][T13897] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 714.717989][T13897] gspca_nw80x: reg_r err -32 [ 714.718048][T13897] nw80x: probe of 4-1:0.0 failed with error -32 06:05:30 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xe053, r0, 0x0, 0x0, 0x0, 0x0, 0x6}]) 06:05:30 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @remote, @val={@void}, {@arp={0x8100, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @multicast}}}}, 0x0) 06:05:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3570) 06:05:30 executing program 5: unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 06:05:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) [ 716.439490][ T7692] usb 4-1: USB disconnect, device number 42 06:05:30 executing program 5: syz_io_uring_setup(0x51, &(0x7f0000000000), &(0x7f0000004000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6247, &(0x7f0000000100), &(0x7f0000007000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000180), 0x0) 06:05:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 06:05:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3588) 06:05:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @info_request}}}}, 0x0) 06:05:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35a0) 06:05:30 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$unix(r0, &(0x7f0000006740)=[{{&(0x7f0000000300)=@abs={0x1}, 0x6e, 0x0}}], 0x1, 0x0) 06:05:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x0, 0x0, 0x9}, 0x48) 06:05:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0xf, 0x8, 0x0, r0, 0x0}]) 06:05:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35b8) 06:05:30 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) r2 = memfd_secret(0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x1}]) 06:05:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 716.944509][ T7692] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 717.298784][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 717.298821][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.300376][ T7692] usb 4-1: config 0 descriptor?? [ 717.340214][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 717.782052][ T7692] gspca_nw80x: reg_r err -32 [ 717.782089][ T7692] nw80x: probe of 4-1:0.0 failed with error -32 06:05:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:33 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @info_request}}}}, 0x0) 06:05:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35d0) 06:05:33 executing program 0: syz_emit_ethernet(0x392, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd65ecd011035c"], 0x0) 06:05:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2525"], 0x148}}, 0x0) 06:05:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 719.519502][ T27] usb 4-1: USB disconnect, device number 43 06:05:33 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:05:33 executing program 0: openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x547c01}, 0x18) 06:05:33 executing program 4: fsopen(&(0x7f00000003c0)='cpuset\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0xaaaaaaaaaaaaad2, &(0x7f0000000100)=[{&(0x7f00000002c0)="0c83725bc06ce2c55367f137ae6fb3dd433ea4a5eb402f9cfebd0322465946f2745dfde295bf1f1243de1bc3ba8682c9c5878022bfe5d58b13bf0e683689fdece9c307aa1dae085aa953eb459b4f67f4fa1f9103e15d5effc499c1cd5315f836e0ce731953261322d601d19c2afdee1dc42ba9e6724dab156b1262349942de5e5e57fea01be23e7969a15b0f7daea286f4e1b533f94866e3c692c95a143a969729795173dba444e87110a12b3fb14cf47310a5091c9aeae6afb3dd9bcdcccb6c87b00898deafcb3b31e983be911b4579a1234b2fe52e593c705d2f3a999d78a3a9cb124ecd789da32c546feb87fdc98adb5de08580ce", 0xf6}], 0x2800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646f74732c7365636c6162656c2c736d61636b66736465663d252c6f626a5f757365723d9051e474f8f17f8a004b2c657569643e", @ANYRESDEC, @ANYBLOB=',\\id<', @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d4c64718cb65e30c3a88bd8bbfe2da556ad5a798a3e016038d7294e4815907d0c50c1a86658baeb746794439491343d8af8592b1a4ee3e6d0815bf5066cb336f8e2c433f692bf9d149ffea8cf92e48aa334aa389b2c00"]) [ 719.593572][T17365] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.4'. 06:05:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35e8) 06:05:33 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@arp={0x8100, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @ipv4, @link_local, @rand_addr=' \x01\x00'}}}}, 0x0) 06:05:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3600) [ 720.028138][ T27] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 720.396026][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 720.396063][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.398096][ T27] usb 4-1: config 0 descriptor?? [ 720.440061][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 720.877982][ T27] gspca_nw80x: reg_r err -32 [ 720.878039][ T27] nw80x: probe of 4-1:0.0 failed with error -32 06:05:36 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1f84, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x2, 0x2, 0x0, r0, 0x0, 0x1000000}]) 06:05:36 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3618) 06:05:36 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x94}]}) 06:05:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:36 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x35}, {}]}) 06:05:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 722.620555][ T7692] usb 4-1: USB disconnect, device number 44 06:05:36 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{}]}) 06:05:36 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x4d}]}) 06:05:36 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3630) 06:05:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{}, {0x5}]}) 06:05:36 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{}, {0x35}]}) 06:05:36 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x180, 0xc2, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x18, 0x3f, 0x1, 0x9b}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x0, 0x40, 0x0, 0x0, 0x7}, 0x4c, &(0x7f0000000600)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "56e135dbe60d9604fe928fea1c56a87c"}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "5a4ca01293710321f52719219ff48fa4"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x9, 0x1e, 0x1, [0x0, 0x0, 0x0]}, @ext_cap={0x7}]}, 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) 06:05:36 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 06:05:36 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3648) 06:05:36 executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="666d61736b3d303030303030303030303030313531ff"]) [ 723.000022][T17410] Error: Driver 'raw-gadget' is already registered, aborting... [ 723.000038][T17410] UDC core: USB Raw Gadget: driver registration failed: -16 [ 723.000056][T17410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.062192][T17412] Error: Driver 'raw-gadget' is already registered, aborting... [ 723.062208][T17412] UDC core: USB Raw Gadget: driver registration failed: -16 [ 723.062228][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:05:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 723.127772][ T7692] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 723.517915][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 723.517952][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.519992][ T7692] usb 4-1: config 0 descriptor?? [ 723.560181][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 723.978339][ T7692] gspca_nw80x: reg_r err -32 [ 723.978396][ T7692] nw80x: probe of 4-1:0.0 failed with error -32 06:05:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:39 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3660) 06:05:39 executing program 4: syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee00}}]}) 06:05:39 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{}, {}]}) 06:05:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x30}]}) 06:05:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 725.698325][ T27] usb 4-1: USB disconnect, device number 45 06:05:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5}]}) 06:05:39 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3678) 06:05:39 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x61}]}) 06:05:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000300)) 06:05:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f0000000300)) 06:05:39 executing program 5: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000003bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000004ac0)='./file0\x00', &(0x7f0000004b00), 0x0, &(0x7f0000004b40)={[{@default_permissions}, {@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on}]}) [ 726.015723][T17448] overlayfs: bad mount option "redirect_dir=./file0" [ 726.247847][ T27] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 726.608210][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 726.608247][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.613881][ T27] usb 4-1: config 0 descriptor?? [ 726.650229][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 727.088311][ T27] gspca_nw80x: reg_r err -32 [ 727.088365][ T27] nw80x: probe of 4-1:0.0 failed with error -32 06:05:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:42 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3690) 06:05:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x29, 0x0, &(0x7f0000000300)) 06:05:42 executing program 0: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x3e}, &(0x7f00000000c0)=""/58, 0x3a, &(0x7f0000000100)=""/219, 0x0}, 0x58) 06:05:42 executing program 5: pause() sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 06:05:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 728.817189][ T27] usb 4-1: USB disconnect, device number 46 06:05:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 06:05:42 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x36a8) 06:05:42 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x1, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xa8, &(0x7f0000000180)=""/168, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:05:42 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x36c0) 06:05:42 executing program 0: syz_open_dev$rtc(&(0x7f0000000340), 0x0, 0x4000) 06:05:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) [ 729.287865][ T27] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 729.648138][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 729.648181][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.650464][ T27] usb 4-1: config 0 descriptor?? [ 729.694357][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 730.128168][ T27] gspca_nw80x: reg_r err -32 [ 730.128225][ T27] nw80x: probe of 4-1:0.0 failed with error -32 06:05:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:45 executing program 0: keyctl$chown(0x10, 0x0, 0xee01, 0x0) 06:05:45 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x36d8) 06:05:45 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000001000)='./file1\x00', 0x0, 0x0) 06:05:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:05:45 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40, 0x0) [ 731.901525][ T27] usb 4-1: USB disconnect, device number 47 06:05:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x80, 0x4000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x5}, 0x48) 06:05:45 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) openat$incfs(r0, &(0x7f0000000300)='.pending_reads\x00', 0x8640, 0x0) 06:05:45 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x36f0) 06:05:45 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) execveat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x100) 06:05:45 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x400) [ 732.398115][ T27] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 732.758075][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 732.758111][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.760831][ T27] usb 4-1: config 0 descriptor?? [ 732.799385][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 733.237870][ T27] gspca_nw80x: reg_r err -32 [ 733.237927][ T27] nw80x: probe of 4-1:0.0 failed with error -32 06:05:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:48 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3708) 06:05:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc) 06:05:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="b8b8", 0x2, r0) 06:05:48 executing program 0: add_key(&(0x7f00000000c0)='trusted\x00', 0x0, &(0x7f0000000200)="b8", 0x1, 0x0) 06:05:48 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, 0x0, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 734.963168][ T27] usb 4-1: USB disconnect, device number 48 06:05:48 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='trusted\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{r1}]}) 06:05:48 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3720) 06:05:48 executing program 0: memfd_create(&(0x7f0000000100)='\x00', 0x3) 06:05:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x6, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @func, @map_val, @cb_func], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:05:48 executing program 4: add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 06:05:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 735.457767][ T27] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 735.817926][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 735.817962][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.819426][ T27] usb 4-1: config 0 descriptor?? [ 735.861232][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 736.391735][ T4381] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 736.737941][ T27] gspca_nw80x: reg_r err -71 [ 736.737975][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 736.740765][ T27] usb 4-1: USB disconnect, device number 49 [ 736.747070][T12268] udevd[12268]: setting owner of /dev/bus/usb/004/049 to uid=0, gid=0 failed: No such file or directory 06:05:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:50 executing program 5: keyctl$search(0xc, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0) 06:05:50 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3738) 06:05:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) 06:05:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) 06:05:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x1b}, 0x48) 06:05:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc) 06:05:50 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x303a01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000000)='$\'{\x00', 0x5) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x3, 0x0, 0x0) 06:05:50 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3750) 06:05:50 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)) 06:05:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 737.568240][ T7692] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 737.948048][ T7692] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 737.948085][ T7692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.949580][ T7692] usb 4-1: config 0 descriptor?? [ 737.999500][ T7692] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 738.877939][ T7692] gspca_nw80x: reg_r err -71 [ 738.877999][ T7692] nw80x: probe of 4-1:0.0 failed with error -71 [ 738.894072][ T7692] usb 4-1: USB disconnect, device number 50 06:05:52 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3768) 06:05:52 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x215}, 0x98) 06:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @loopback}}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @prinfo={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}, @sndrcv={0x2c}, @authinfo={0x10}], 0xb4}, 0x0) 06:05:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@un=@file={0xa}, 0xa) 06:05:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1) 06:05:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000000), 0xc) 06:05:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3780) 06:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x42) 06:05:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x98) 06:05:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3798) 06:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) 06:05:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@init={0x14}], 0x14}, 0x0) 06:05:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000000c0), 0x8) 06:05:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x37b0) [ 739.717905][ T6302] usb 4-1: new high-speed USB device number 51 using dummy_hcd 06:05:53 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 740.088217][ T6302] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 740.088239][ T6302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.090741][ T6302] usb 4-1: config 0 descriptor?? [ 740.130050][ T6302] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 740.987955][ T6302] gspca_nw80x: reg_r err -71 [ 740.988010][ T6302] nw80x: probe of 4-1:0.0 failed with error -71 [ 740.991852][ T6302] usb 4-1: USB disconnect, device number 51 06:05:55 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000340)={0x1c, 0x1c}, 0x1c) 06:05:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) 06:05:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x105) 06:05:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x37c8) 06:05:55 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, r4, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) sendto(r0, &(0x7f0000000040)="bb", 0x1, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 06:05:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x37e0) 06:05:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240), 0x98) 06:05:55 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 06:05:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x76, 0x7ff, 0x6}, 0x10) 06:05:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x37f8) 06:05:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)=0x94) [ 741.867923][ T6300] usb 4-1: new high-speed USB device number 52 using dummy_hcd 06:05:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2={0x1f, 0x0, @none}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @nfc}) 06:05:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x541b, 0x0) 06:05:55 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3810) 06:05:55 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, r4, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 742.269829][ T6300] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 742.269864][ T6300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.277172][ T6300] usb 4-1: config 0 descriptor?? [ 742.320310][ T6300] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 743.170689][ T6300] gspca_nw80x: reg_r err -71 [ 743.170776][ T6300] nw80x: probe of 4-1:0.0 failed with error -71 [ 743.176785][ T6300] usb 4-1: USB disconnect, device number 52 06:05:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:57 executing program 5: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000006940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 06:05:57 executing program 4: semget(0x0, 0x4, 0x200) 06:05:57 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000280)) 06:05:57 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3828) 06:05:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, r4, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:57 executing program 4: semget(0x1, 0x1, 0x0) 06:05:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{0x1b}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 06:05:57 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3840) 06:05:57 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) pipe(&(0x7f0000000b40)) 06:05:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:05:57 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 744.047758][T10689] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 744.407908][T10689] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 744.407946][T10689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.410286][T10689] usb 4-1: config 0 descriptor?? [ 744.449985][T10689] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 745.327976][T10689] gspca_nw80x: reg_r err -71 [ 745.328969][T10689] nw80x: probe of 4-1:0.0 failed with error -71 [ 745.342607][T10689] usb 4-1: USB disconnect, device number 53 06:05:59 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0}) 06:05:59 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @empty}}}, 0x108) 06:05:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3858) 06:05:59 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 06:05:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x32, 0x0, 0x0) 06:05:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:05:59 executing program 5: unshare(0x30000) 06:05:59 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 06:05:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 06:05:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3870) 06:05:59 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9effffff) 06:05:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x8, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) [ 746.177882][T10689] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 746.538094][T10689] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 746.538130][T10689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.542147][T10689] usb 4-1: config 0 descriptor?? [ 746.583971][T10689] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 746.931942][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.457846][T10689] gspca_nw80x: reg_r err -71 [ 747.457901][T10689] nw80x: probe of 4-1:0.0 failed with error -71 [ 747.464116][T10689] usb 4-1: USB disconnect, device number 54 06:06:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:06:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 06:06:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000008c0)=@caif, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 06:06:01 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3888) 06:06:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f0000000080)={'wlan1\x00'}) 06:06:01 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window, @timestamp, @window, @mss], 0x4) 06:06:01 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x2a0, 0x3b8, 0xffffffff, 0x2a0, 0x0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x1f8, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@unspec=@comment={{0x120}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev, @port, @icmp_id}}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'tunl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) 06:06:01 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='GPL\x00', 0x3, 0xd3, &(0x7f0000000300)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:01 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x38a0) 06:06:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000240)=""/238, 0x2e, 0xee, 0x1}, 0x20) 06:06:01 executing program 4: r0 = syz_io_uring_setup(0x53e0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r1, r0], 0x2) [ 748.142265][T17723] x_tables: duplicate underflow at hook 1 [ 748.357924][ T4125] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 748.747960][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 748.747998][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.749951][ T4125] usb 4-1: config 0 descriptor?? [ 748.800362][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 749.687859][ T4125] gspca_nw80x: reg_r err -71 [ 749.687912][ T4125] nw80x: probe of 4-1:0.0 failed with error -71 [ 749.691399][ T4125] usb 4-1: USB disconnect, device number 55 06:06:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:06:03 executing program 0: syz_open_dev$vcsu(&(0x7f0000000500), 0x0, 0x210000) 06:06:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000100)=@un=@abs, 0x8, 0x0}, 0x0) 06:06:03 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x38b8) 06:06:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 06:06:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, 0x0, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:03 executing program 0: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) 06:06:03 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) r2 = dup2(r1, r0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) r5 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000200)=0x64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x108, &(0x7f0000000080)={r6, 0x0, 0x1}, &(0x7f00000000c0)=0x18) 06:06:03 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x38d0) 06:06:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002640)={&(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0x10}, 0x0) 06:06:04 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000080)={0x6f99, 0x0, 0x0, 0x0, r3}, 0x10) 06:06:04 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x38e8) [ 750.600131][ T4125] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 750.998128][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 750.998162][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.001427][ T4125] usb 4-1: config 0 descriptor?? [ 751.049968][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 751.907804][ T4125] gspca_nw80x: reg_r err -71 [ 751.907856][ T4125] nw80x: probe of 4-1:0.0 failed with error -71 [ 751.909662][ T4125] usb 4-1: USB disconnect, device number 56 06:06:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 06:06:05 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3900) 06:06:05 executing program 0: openat$ptmx(0xffffff9c, 0x0, 0x328403, 0x0) 06:06:05 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:05 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 06:06:05 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000040)) 06:06:06 executing program 0: clock_gettime(0x0, &(0x7f0000000a00)={0x0}) pselect6(0x40, &(0x7f0000000940), &(0x7f0000000980)={0x81}, 0x0, &(0x7f0000000a40)={r0}, 0x0) 06:06:06 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, 0x0) 06:06:06 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3918) 06:06:06 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0xffffff70, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0xfffe, 0xfffe}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 06:06:06 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a02ce3089f0482008df4010203010902240001000000000904000002b23786000905040020001a0000090504000000000000"], 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40381) ioctl$EVIOCSMASK(r0, 0x4004662b, &(0x7f0000000040)={0x2, 0x1ec, 0x0}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000580)={0x1ff, 0x80, 0x851, 0x3, 0xb02e}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x4, 0x53, 0x20, 0x80}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "c865c49d818caff573b6e45af591bd68b471a8babe4a27920523bae944a34f2ef15bc2d2b33b22c08ef5551e280a"}}, {0xa6, 0x0}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "4e65120ff36cc61a22f2e5248e465f4080b489ad8c14595826acf34552185fcb948105606f117a14bd6aa5cbbb1287"}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "abbc2f1c389d1e9b00e287a15a2cb886057054a5096209"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "e028ff2e9377121ed41274c690b958a7fe73dc68eddde1d140210154823472be7986985ee032a765a76b5cbd622d55b0b80c4b"}}, {0x69, &(0x7f0000000440)=ANY=[@ANYBLOB="6902e9e116eb852685e0686284ad02bcaa5daadfbba1d80653c4408d3f3c35e72758339034e45dc745f3ea9a3f37802ebe7cc449"]}]}) 06:06:06 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004600)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0) [ 752.819278][T17793] Error: Driver 'raw-gadget' is already registered, aborting... [ 752.819293][T17793] UDC core: USB Raw Gadget: driver registration failed: -16 [ 752.819312][T17793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.837895][ T27] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 753.258016][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 753.258050][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.259551][ T27] usb 4-1: config 0 descriptor?? [ 753.300101][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 754.147829][ T27] gspca_nw80x: reg_r err -71 [ 754.147884][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 754.153559][ T27] usb 4-1: USB disconnect, device number 57 06:06:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:06:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3930) 06:06:08 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x2d8b69f3459263e2, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 06:06:08 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='s') process_vm_writev(r0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/227, 0xe3}], 0x1, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0) 06:06:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:08 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a02ce3089f0482008df4010203010902240001000000000904000002b23786000905040020001a0000090504000000000000"], 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40381) ioctl$EVIOCSMASK(r0, 0x4004662b, &(0x7f0000000040)={0x2, 0x1ec, 0x0}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000580)={0x1ff, 0x80, 0x851, 0x3, 0xb02e}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x4, 0x53, 0x20, 0x80}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "c865c49d818caff573b6e45af591bd68b471a8babe4a27920523bae944a34f2ef15bc2d2b33b22c08ef5551e280a"}}, {0xa6, 0x0}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "4e65120ff36cc61a22f2e5248e465f4080b489ad8c14595826acf34552185fcb948105606f117a14bd6aa5cbbb1287"}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "abbc2f1c389d1e9b00e287a15a2cb886057054a5096209"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "e028ff2e9377121ed41274c690b958a7fe73dc68eddde1d140210154823472be7986985ee032a765a76b5cbd622d55b0b80c4b"}}, {0x69, &(0x7f0000000440)=ANY=[@ANYBLOB="6902e9e116eb852685e0686284ad02bcaa5daadfbba1d80653c4408d3f3c35e72758339034e45dc745f3ea9a3f37802ebe7cc449"]}]}) [ 754.685153][ T28] audit: type=1800 audit(1652853968.234:175): pid=17798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".pending_reads" dev="sda1" ino=1176 res=0 errno=0 06:06:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)='=', 0x1}, {&(0x7f0000000100)="fb", 0x1}], 0x2}, 0x0) 06:06:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)="b2", 0x1}], 0x2}, 0x0) [ 754.737482][T17808] Error: Driver 'raw-gadget' is already registered, aborting... [ 754.737498][T17808] UDC core: USB Raw Gadget: driver registration failed: -16 06:06:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3948) 06:06:08 executing program 4: mq_open(&(0x7f0000000100)='(+%\x00', 0x2, 0x0, 0x0) [ 754.737518][T17808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:06:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3960) 06:06:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='\v', 0x1}, {0x0}], 0x2}, 0x0) [ 754.987842][ T27] usb 6-1: new high-speed USB device number 34 using dummy_hcd 06:06:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:06:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, 0x0, 0xffffffffffffffac}, 0x0) 06:06:08 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3978) 06:06:08 executing program 0: syz_clone(0x81100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:06:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 755.247974][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 755.351021][T17836] Error: Driver 'raw-gadget' is already registered, aborting... [ 755.351098][T17836] UDC core: USB Raw Gadget: driver registration failed: -16 [ 755.351121][T17836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.394801][ T27] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 755.548499][ T27] usb 6-1: New USB device found, idVendor=049f, idProduct=0082, bcdDevice=f4.8d [ 755.548521][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.548535][ T27] usb 6-1: Product: syz [ 755.548544][ T27] usb 6-1: Manufacturer: syz [ 755.548554][ T27] usb 6-1: SerialNumber: syz [ 755.550168][ T27] usb 6-1: config 0 descriptor?? [ 755.829453][ T6300] usb 6-1: USB disconnect, device number 34 06:06:09 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a02ce3089f0482008df4010203010902240001000000000904000002b23786000905040020001a0000090504000000000000"], 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40381) ioctl$EVIOCSMASK(r0, 0x4004662b, &(0x7f0000000040)={0x2, 0x1ec, 0x0}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000580)={0x1ff, 0x80, 0x851, 0x3, 0xb02e}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x4, 0x53, 0x20, 0x80}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "c865c49d818caff573b6e45af591bd68b471a8babe4a27920523bae944a34f2ef15bc2d2b33b22c08ef5551e280a"}}, {0xa6, 0x0}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "4e65120ff36cc61a22f2e5248e465f4080b489ad8c14595826acf34552185fcb948105606f117a14bd6aa5cbbb1287"}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "abbc2f1c389d1e9b00e287a15a2cb886057054a5096209"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "e028ff2e9377121ed41274c690b958a7fe73dc68eddde1d140210154823472be7986985ee032a765a76b5cbd622d55b0b80c4b"}}, {0x69, &(0x7f0000000440)=ANY=[@ANYBLOB="6902e9e116eb852685e0686284ad02bcaa5daadfbba1d80653c4408d3f3c35e72758339034e45dc745f3ea9a3f37802ebe7cc449"]}]}) 06:06:09 executing program 4: socketpair(0x11, 0x2, 0xf1, &(0x7f0000001240)) 06:06:09 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3990) 06:06:09 executing program 0: socketpair(0x11, 0x0, 0xf1, &(0x7f0000001240)) 06:06:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, 0x0, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:06:10 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:10 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x39a8) 06:06:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4, 0x4}]}]}}, 0x0, 0x32}, 0x20) [ 756.456913][T17849] Error: Driver 'raw-gadget' is already registered, aborting... [ 756.456929][T17849] UDC core: USB Raw Gadget: driver registration failed: -16 [ 756.456949][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:06:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10}]}}, &(0x7f0000000280)=""/140, 0x26, 0x8c, 0x1}, 0x20) 06:06:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x7f, 0xfffffffb, 0x0, 0x1}, 0x48) 06:06:10 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x39c0) [ 756.688055][ T27] usb 4-1: new high-speed USB device number 58 using dummy_hcd 06:06:10 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a02ce3089f0482008df4010203010902240001000000000904000002b23786000905040020001a0000090504000000000000"], 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x40381) ioctl$EVIOCSMASK(r0, 0x4004662b, &(0x7f0000000040)={0x2, 0x1ec, 0x0}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000580)={0x1ff, 0x80, 0x851, 0x3, 0xb02e}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x4, 0x53, 0x20, 0x80}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "c865c49d818caff573b6e45af591bd68b471a8babe4a27920523bae944a34f2ef15bc2d2b33b22c08ef5551e280a"}}, {0xa6, 0x0}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "4e65120ff36cc61a22f2e5248e465f4080b489ad8c14595826acf34552185fcb948105606f117a14bd6aa5cbbb1287"}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "abbc2f1c389d1e9b00e287a15a2cb886057054a5096209"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "e028ff2e9377121ed41274c690b958a7fe73dc68eddde1d140210154823472be7986985ee032a765a76b5cbd622d55b0b80c4b"}}, {0x69, &(0x7f0000000440)=ANY=[@ANYBLOB="6902e9e116eb852685e0686284ad02bcaa5daadfbba1d80653c4408d3f3c35e72758339034e45dc745f3ea9a3f37802ebe7cc449"]}]}) 06:06:10 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:06:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, 0x0, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:10 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x39d8) 06:06:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000280)=""/140, 0x1a, 0x8c, 0x1}, 0x20) [ 757.061189][T17871] Error: Driver 'raw-gadget' is already registered, aborting... [ 757.061205][T17871] UDC core: USB Raw Gadget: driver registration failed: -16 [ 757.061232][T17871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.088303][ T27] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 757.088336][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.094761][ T27] usb 4-1: config 0 descriptor?? [ 757.136850][ T27] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 758.148028][ T27] gspca_nw80x: reg_r err -71 [ 758.148103][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 758.151616][ T27] usb 4-1: USB disconnect, device number 58 06:06:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x39f0) 06:06:12 executing program 4: syz_clone(0x14001400, 0x0, 0xffe7, 0x0, 0x0, 0x0) 06:06:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, 0x0, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x28, 0x0, 0x0, "7ba99dd75c7ac98fb667bf3d574e254a06"}], 0x28}, 0x0) 06:06:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53}]}}, &(0x7f0000001a00)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 06:06:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x5, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x5e3, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000003c0)="aa", &(0x7f0000000000)=""/61}, 0x20) 06:06:12 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc004743e, 0x0) 06:06:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$sock(r1, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x0}, 0x20004004) 06:06:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a08) 06:06:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x5, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5e3, r0}, 0x38) 06:06:12 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40) [ 758.997843][ T6097] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 759.387941][ T6097] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 759.387977][ T6097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.390324][ T6097] usb 4-1: config 0 descriptor?? [ 759.441185][ T6097] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 760.548056][ T6097] gspca_nw80x: reg_r err -71 [ 760.548111][ T6097] nw80x: probe of 4-1:0.0 failed with error -71 [ 760.556135][ T6097] usb 4-1: USB disconnect, device number 59 06:06:14 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) 06:06:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a20) 06:06:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:14 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={0x0, 0x0, 0x20}, 0x10) 06:06:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2) write$tun(r0, &(0x7f0000000040)={@void, @void, @llc={@snap={0x0, 0x0, "c4", "793aaa"}}}, 0x8) 06:06:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xc0045878, 0x0) 06:06:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1e) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e21, 0x4, @local, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="3dd2d91d0308ea52fb8f26daf65fea1ef989d2172a4a4057455481fb2ebd45e106a78ce139dd1c278ff67bd08397a83f1c18a0397b32dbb00f12d787ecfc05e9b77174962a933d8db7b8fe48d6679760d93820c3094a1da9832b59dd5480", 0x5e}, {0x0}, {0x0}], 0x4}, 0x20004081) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 06:06:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val, @void, @x25={0x0, 0x0, 0x0, "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"}}, 0xfffffdef) 06:06:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a38) 06:06:14 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200003, 0x0) 06:06:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x4, 0x13, r0, 0x0) [ 761.427837][ T6556] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 761.829590][ T6556] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 761.829626][ T6556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.831498][ T6556] usb 4-1: config 0 descriptor?? [ 761.870419][ T6556] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 762.947979][ T6556] gspca_nw80x: reg_r err -71 [ 762.948035][ T6556] nw80x: probe of 4-1:0.0 failed with error -71 [ 762.950617][ T6556] usb 4-1: USB disconnect, device number 60 06:06:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:17 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a50) 06:06:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5452, 0x0) 06:06:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:17 executing program 0: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB='enc=oaep hash='], 0x0, 0x0) 06:06:17 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @random="bf6bbb56bd1e", "6b1b70c0", @remote, "8a63ef2d"}}}}, 0x0) 06:06:17 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 06:06:17 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a68) 06:06:17 executing program 5: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000000)) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/4096) 06:06:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1021, &(0x7f0000000200), 0x0) 06:06:17 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) [ 763.808069][ T6300] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 764.168014][ T6300] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 764.168035][ T6300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.169586][ T6300] usb 4-1: config 0 descriptor?? [ 764.210073][ T6300] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 765.307805][ T6300] gspca_nw80x: reg_r err -71 [ 765.307861][ T6300] nw80x: probe of 4-1:0.0 failed with error -71 [ 765.315306][ T6300] usb 4-1: USB disconnect, device number 61 06:06:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000001e00)={&(0x7f0000000840)=@in6={0x18, 0x1}, 0xc, 0x0, 0x0, &(0x7f0000000b80)}, 0x0) 06:06:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a80) 06:06:19 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x1015, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000040), 0x0) 06:06:19 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x1d, &(0x7f0000000200), 0x0) 06:06:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r4, 0x0, r5, 0x0], 0x5}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:19 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x310}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1015, 0xffffffffffffffff, 0x0) 06:06:19 executing program 4: setitimer(0x2, &(0x7f0000001d40)={{}, {0x0, 0x3}}, &(0x7f0000001d80)) 06:06:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/178, 0xb4}, {&(0x7f00000000c0)=""/86, 0xfffffffffffffde1}, {&(0x7f0000000140)=""/194, 0xd0}, {&(0x7f0000000340)=""/185, 0xb9}], 0xffffffffffffdf2, 0x0, 0x0) 06:06:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a98) 06:06:19 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) 06:06:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 06:06:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000001740)="f553529ef975854e4066a628de2e2ff66d10c37a17e327245ba4c2ad0e579da2c5703c0e63374ef6d1f00fe7377389a089c7d389f209d90170da4acf624604ef62fffd55155dd7c55c82a92dfc6c8d1d425cab4a4a0bdffee2e7923bc710596916100d25ca628815d98ddaa01f6cd59ea151c3545a1b0e956ba8584917ff6e7f56ac2b2052b3223e63f89ed98d1720e3dd", 0x91, 0x0, 0x0, 0x0) 06:06:19 executing program 4: setuid(0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 06:06:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ab0) 06:06:19 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x74}) 06:06:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[0x0, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000008060308000000000000000007000006050001"], 0x38}}, 0x0) 06:06:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3f, 0x0, 0x80000001}, 0x48) 06:06:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ac8) 06:06:19 executing program 0: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x43) 06:06:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 06:06:19 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4008ae61, &(0x7f0000000000)) [ 766.279975][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 06:06:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x80000001}, 0x48) 06:06:19 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ae0) 06:06:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4008ae6a, &(0x7f0000000000)) 06:06:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 06:06:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[0x0, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:20 executing program 3: openat$vcs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/65) 06:06:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3af8) 06:06:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xfffff94b, 0x75, 0x400}, 0x48) 06:06:20 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0xa4}) 06:06:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) 06:06:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) 06:06:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b10) 06:06:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x0, 0x4, 0x0, 0x4}, 0x48) 06:06:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x2}]}, 0x1c}}, 0x0) 06:06:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[0x0, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b28) 06:06:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3f, 0x4, 0x80000001}, 0x48) 06:06:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14, 0x2, 0x2, 0x801}, 0x14}}, 0x0) 06:06:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 06:06:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b7"], 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 06:06:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x3}, @NFQA_CFG_CMD={0x8}]}, 0x2c}}, 0x0) 06:06:20 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b40) 06:06:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) [ 767.422380][ T4147] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 767.425944][T18076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:06:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14, 0xd, 0x3, 0x801}, 0x14}}, 0x0) 06:06:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12}, 0x48) 06:06:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b58) 06:06:21 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:21 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x1}, 0x14}}, 0x0) 06:06:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000030601010000000000000000070000030500010007"], 0x24}}, 0x0) 06:06:21 executing program 5: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) 06:06:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b70) 06:06:21 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4010aefd, 0x0) [ 767.849296][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 06:06:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x20000098, &(0x7f0000000080)=@raw=[@map_val], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3b88) 06:06:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:06:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x100}, 0x48) 06:06:21 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x5450, 0x0) 06:06:21 executing program 5: syz_clone(0x2000040, 0x0, 0x0, 0x0, 0x0, 0x0) 06:06:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ba0) 06:06:21 executing program 3: openat$tun(0xffffff9c, &(0x7f0000000100), 0x102, 0x0) 06:06:21 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) 06:06:21 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4020ae76, &(0x7f0000000000)) 06:06:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3bb8) 06:06:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000940)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) 06:06:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000004000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="1b", 0x1}], 0x1}, 0x0) 06:06:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 06:06:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3bd0) 06:06:22 executing program 3: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001080)=@ethernet={0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001380)}, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x13, 0x2, &(0x7f0000002640)=@raw=[@ldst={0x0, 0x2, 0x0, 0x0, 0x2}, @exit], &(0x7f0000002680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002ac0)=[r1, r1, r1, 0xffffffffffffffff, r1, r1, r1, r1, 0xffffffffffffffff]}, 0x80) syz_clone(0x40000080, &(0x7f00000000c0)="44aa236e9dd96a89cac0ac04e331bd5514", 0x11, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r2}, 0x4) 06:06:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@func={0x8}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x30, 0x61]}}, &(0x7f0000000940)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 06:06:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="425debeda5532b26344efc46fb7d7d10422e2f", 0x13}, {&(0x7f00000000c0)="26559b8394fc55dcbbc92c4a5d8d29ccfa26e50304e3476fa86ae5b5a1c3233f234cea8699b2eb53e90651b3b488fec59df91d58fa69b92dd73f2ef6d33f90c8a9d80f5d1e0e104119bd48ba0f6cca0b735c33a301abd6905abe", 0x5a}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="75832b2d28dfcf3d8733996ad555be4384c73a093a43ffb52c7f5278d4bcaed36b722c99c643076f8c80ef4f85a8e4751d01200a30257451907471398afdb7ca02395c0e8754f33b1ddc7b450facdd4ba2b83bbe5708ac0ba92b18fc3e049cdf67aa6dc2fa847bc17a202006b99678f2a20750a7c7faac7fa3f833b57a43eb9fb494a90c55159238d32b75b64b08fb0b100c72f74a0d067bac8ae76147095158c26a7e11450526d37bac1a83ca468710bb7539d6f0d06a5c000434a7da556ee15ffc5a3d394c8e3a9998206651348f65eaed9f20c56970219f9b412c18ef9a3a8ad5ec77ca20030e5afb0b00a276a8833414d7b975f4e88062e0c932e4f500c97b07d1aea7e0d50b087775561307b08189237bd948542cf1390fda32486307d1fe146663f62fa64119b5aebbca43df5b8872a04a2b3631956b0c6913a430370a0faf67821efc62fe29413866492653889955464d49893ea68a0d13314fe2d5dfeaeaadce5a464e29796eccdc5eebfcf4ff10f7d81fba2ce093ea0150e07e0f300ec3db520c061c02d22816c19da55e840bb80cc026b218a49508ece88c7833b62105a2d9b3ea17b4ab121fbc7bb39ad0ef0cf6fad3b475c539bca04db647a0d731139ca6839bd68ba5d240ced773545ee2eff4c823b919a8fc2fe4f5dfe1915e55a49201f03ee1588d945f51e9fe8189c58296f4b9a50c6122c356ad1cc8926ce2f62347b5eaafe3a1a927c0844b5f2d8e1f2745d59b79c7b970d18e46856cf0ef2131d9eb63708c5a8e62b8e03f97029fed62eecc75326d74785b92ef9555a62ac6ae4e40d2daa7b4dab7f12f379b5a681fbaa32624a039cacf609d84101dc90cc5826f2c18c6c5da2477e8860e255aa725f3e8125afc7aa9cce7a1980cbe68662baabe1c262ab960823987f9c4f42c312fce0c788157ac764461a0bf546f60bd67c693141aee3681114dfc9469c4d66f5cc3f9e160f6c0e0c40f5dc01892027a5dcef17f4e75efe559c35ae32e3a43df81bb64a12f1a7a84d887ba11c31309f38bfb49ddb5f1edd372e530fedbeca26bc79cdc0ef6b98de274f5a65b3b5644f34493dbfadf79870e3d4620f4a4d94de21ccd13181f47afe7d5500115f32cbf29e95d619264d5125fdad722c2d5ea56de8e42f7425c840f289bba7aa87a7a21d88b652d0ed0848d688078fd08981889ba0280234328523c877d0c9be63001166139cd6283fb30a8b0402673a53491a6ec879ecac3580a00d5b456bf4c8ddf246f0e88ea17b89c15305787b2e4786846db0675d6f44dbc96c5ca96deb730cf03dc99b1ec08db7f80edafaaabc712dd09b504b40f1c52c0784495429ddf6a49aec01d2b1d4030896f2fada06d48bc0c91137235edacac2f09d9e7aaa4d8f25f4906bbd4c86abd32eca29b9a245f70471ec1ff4c21fcf65a87f5c05a72a831910ea70da14fc726ab659f0130715af60b4650ea3f678f6fa5b244af8bfc68947c0a617ec250aeeeabec8128a3287569520fae1db1801aac0cd14143d0b60454343ffa7090333524b412a487eda379290440a36e801ed31b31a750be2d95c69a05fb80de49360ef20bf4e6ae3d91e6465d9035897fa3fdfcc3ea1981cf6df9112580c81e608a2d34e5648e376d36ffe3907e11d1fd555f4a26108e8be977473a1e920d8955b6a9cef471707cbcc616528b3722963dd811a91449504e4d2ebbe4dce9ce3773e128e2189a9cbb7dc9ac05c4f1d3b4053d783cab333b174e397a072573bdbe305114d765908c126ea469cc1f9178d5c74d49c269a931043b5979cfd005858892603bea2ddb9842bdefdc6d08006b6a0783afbde68c29af5ff08aecf986a31edcbeb6055e8a0c08096f2ba3d85c8c1ce36380c86830c409e3b5ec8873459ba9678f350c99e0432773ce91f1f69f07974c9f2aefb197869a2e49ded06ef784374a7afe4ca33fe497df223a9fe8e7174df2625656a1f3ca36af53841305867993ea1107d20f22c4f1a49142e367030f0b15a3e6b2440d0049b215b17904680a76fe0b26e4d88e900788f20f60c3d9948ead98dffb0b7cef7d18a3f61768ed70f0f9c1d34252c58a77c2f2634d8bc9706d01373a33e3ed4ff27bca578b2933ff5c9f1df61451db8ac3c933b2e24d007a3394259fd06d2a5a23f025d438d0fb2a29c1d028c8435758dcb0036b57d8860a3998aeb3fc627170dbe09c59251cc91e968747b3392d1639ca1da7ad967e0cf9d80b886be50f3872b7ace2628aecdf1760e44e20b3b50bcb5e2e422634a73444e7cb638590938ea19e991c0023ff9daca9e613c5d5545199b70b883fea16bee2c39fd9e9a3ffe7ee6f9347b6b7a94966d99ea0500242231b6d5f25bdd622b3a32a1305bd14a4516694a7a8e5772362739f3e4ac89ac4e895eeed2c3fb5b9a8d68a94d227588b294cbe9d4f8c145b44b7dec5bc8bebeff12a2d0effe953a89e76f093f7be962c6c4759e4bb0388cd53e7d1f72f6c1f987225bc297aade70a3a05fcb2ff681c25df66743a116dd1755b8acfe93df49441dea717e906786070f2926801d3793d1294a5a50a6be74840a7be7d1ac191cb97ff2deea58ca11e17f07e23d400835f6c692e880498aed3093ccb2a2a205fd0759b4ae05b15af811c64b4dfae2d108a5ce61007b7a812f63a2cbdd647074eb36b2cd15e8d768908246b07b32c96d0ac617e01f8a895753970b9ddbe8255df482e0cf0f8debfeb8f143666493d1e69b932062dfe234cad301bbd5d0bb9491156f5e879d9633999db162bf9bf3e693a79324b82c337ccfcadad3ee02004931eca976fc02ce0d7ee75fc7291aa401b122ddeb928da809212efda223161019bcaceb9f05debeb279f6a8bdd5ffd75dee1b02d98bbd8d2dbf4b14f14b10408d8e340abb5e7ef664a7131aa0ae93868c939ff10305bbfbae01ee14de1e38b29d515cc039c0b67976eb87311b114c0b554f475b8e6f2a8b8fc18ca51164c1d41cb15d53af72cf8bbb67afcd4836f5f4fcaf0ccfbd0be3b06304e7f7d468e75afd6f654e1b5c2c00a23ffea7d44665685fb03b124dc08b2fae69ba6d142018ffbe0cffec39b491e9f562cf4466a92e946ed3aee80a0c39cda404ad76e2c964a975ed21fc5fd655b414a80546560a4286e3fd9a5e4968613f6645d9978c3d4e0d3043e8ecbcb028e4b77b6126c90017ffaee361db286df5474978f98be624c304b911d5450fa2788003d6934a37e4c4466beb06e1f1f850594d19ec2cdfe7c9e483e79a699c287a9041190ae5a269e45d62f306e6af773843ef35fcc7562e9aff5f3b429f13b5d69bea433c77fc3d17782e76c41384af5ef229bf686c7f9830cef21748de7dea31c2365e423055612ff1ca9e83ab5a06b67092987f0575e53599d435e32aba2e8a8427f91bf720fae8f49291408e8865acd2cf26c40923bc1801717c69ab052caad3e9b04b3964f66d68f7e3f3c67f1234db64e2936301194bd09a6bdb089cb811fb28ac2663c220b4478a8e82e05d5041c045340ba812237ec2fbcf244d1b6f41489806c820480770076a4b0a00dccc3ab24c1b027cc494e83d4d9366429a27fbe145f26a3ce24ab8a4eb44b505b7df94bd4ad6d85f20089068e7714a55799f9e93e2eadb4eec6bebb0782b7abf11b86be7500bf3eed3a47a3d8f4fac8dd2b23545b2d685b3f070c2aca072092e31a16defcd0930ee9b024d3134cb525329535e016c106826326f7f9ead1d1a225a3b676f718173437b65b1bd7ffea93ef9c90d2b27a5a32fa4197bb22d6436e630661a2886060dea1559bd8655ef517a4f3eef23be4657df1a7fb77d50c8c7f81a3fa83a9576656c9e36da7a2a454793393e9df03314afdba9f70e487fa73b8814806885001093fadca97bb1b6efcc9e3c8950e40043ebefee778bce8326e1721da68effb25263ec4060f72e146a2733c56eb630150b5f7915f3395710fc7b705ed3f5afe5e3694cf656f43e821d4104ec0d93b955502d2e59728f746671df93bddacef4d9cc72678c2a692c046118376f4aad1362b132bceeeb941910f12ac4fbd7f98ebebc626bd8b3757bbe85c718d0ba2161c6505368c36f58a91c3bbd545b79acab2b484d381e0c43f3763776b65ac4cba8888c7715ad6fc314a086d548b6320cfc51147d094e3f08cafd6ff34aac16f2047bc28dfa173cd1ec0d2a02e619ae2108d326b2c7775b3eb984a99745e25bf1ee98e7a6caddce289518ade091a9ffbf3088b21a25c0ef80e27e52c1e5b69f14807e1c17b4f5c5ae1e43077e4503e96c101ac44d1f9c06890d4aecd1e69eb87a68a00d8bc8e2bdc9ef1208209655fa3a1b12b87e508261c3c3b2ec05182860df1e4c1c572b6dbaae8ebd14fdae552ddde8fd60f84f51c8457b439aceeaf30f13670ba1ecca6efc31d3671e61e4f3aa0ce93e753e0751c728e1bc8743b4ece7b94f7128f944b6915860c0639b8ef865776c489eaf836153d8302a668126f3ea0d9f85f69729a3f9cccc2ef0e6986eb6bc1bb47c6b4aca27ad52544d04b7fafb87cfc2d6c86d7a10dbb94d069e34ec09f6cf1dbcb1190c646e06b75f8d2c3977bf8d294b4cf536e6e9ebc6aedbf17149bb63701c2b22308f7ba893b1dcea5aa71ad6d63bd1ce3f3c91be46a549024bd0b7aa967bf62d1ea34bf3fda471bd73e30d2a6662a3678f5383e9d602e4fc2646f31fef156a1a0fbd27e434599b69d4f3ea7d3fb294184790aa437afe7419a890e5ef3ed00723c4e96c657e79b33a27b611ee2ce940e6b6ed96c8a2350cdc8171fec5c96f8e3d2b561a463d9e522753b9da21f48dee53fa9b2e39ee37f79298d297af32da65ffabbacfea7e0178779c9c2edccc75ccf8f5f0d83eb1fa0a4f01c2eee75c085e13540d25c12d472855e31bda2edcf7394a266e40be438f12008ff47a367c2542a120ef9c9a4f042f6eef1d6bbd1f61157478651d7a3274b3d895e622dad566736b017aea50134d5526c64cf233efe721c891f3a41c2f68fa932c67a36beb43352ffd48079f1e49ffe5194dd5336d24761d59e09f491df08a9b6ba4fbe041292a1ab2be0d08936d58d74818358bf795e047e82852409224fb45598424733f49d854f7d87318963cd42aa8bd2153fb46950cf972f7bf6cecceb71393d62ca269f8ecfd4fead1b5742bab950beaaec3453870eaf5452c5e5", 0xe54}], 0x4}, 0x0) 06:06:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3be8) 06:06:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 06:06:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="1b", 0x1}, {&(0x7f0000000040)="89605b9e87ae8b06e4bd73ef3f9295", 0xf}, {&(0x7f0000000080)="52c93cc9814619a506cdd435e0544c59e5b1b946a1fc35e16483acc5cb2b6ee3a4e2d75f816c45ad18e5d7a9755c6da14a5837dcad7521628996a6f5e0836156ff42083fa462c4cf3f85751b2b3e42ddf9614d68e753ec18ca3f2372f14c6442a3f31d08049674ffbe32d484d6ecebec6a6c93ba29a8b9acb641429b2823d0c4f04a3b270267e7c00ff8d9dd6e5c5998e955e73209cbc19fc2b63b72d7d2f22100762b973fff7f", 0xa7}], 0x3}, 0x0) 06:06:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c00) 06:06:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[], 0xf}, 0x0) 06:06:22 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe640, 0x0) 06:06:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c18) 06:06:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 06:06:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="1b", 0x1}], 0x1}, 0x0) 06:06:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c30) 06:06:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x70}}, 0x0) 06:06:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) 06:06:23 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x40]}, 0x8}) 06:06:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfffffffffffffdcf, 0x1, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x0, 0x1, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0xe4}}, 0x0) 06:06:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c48) 06:06:23 executing program 3: syz_mount_image$minix(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) 06:06:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0}) 06:06:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x48) 06:06:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x25, 0x6, "89391159452f4bfa73ca028d956a01a04905ac1145fbd87e0315266d84d4419d9b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "2c4d311576"}, @NFTA_TABLE_USERDATA={0x69, 0x6, "9197b555e1a4fb9b2f04f31ec508e834696e04055e9227cbc7bdd64be6fc428f307db98c27cedb2d8f128ea4d1fb0fa8f349fcd104eeb82a2f0de408b3328c9d2f1634e3d815f960089c3be339870c824ca897413e445f2f4710fa0bbad539d69b700b8c75"}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xca0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc80, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "eb5405e36a5cf665586e9f1f89381ff6ce2b4eb2de79b53255b1f12ce0abd8e8493e131bdb1f51a88b9bac0209e650232d76f329b1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd, 0x1, "2e989847769d267622"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x61, 0x1, "bfbdd6e00fb1b96557dd5811d1c244ae06e51bbf2b917d0a07e9ae469a2f69bfcd0c05797f155452a018fcd0e1684b9a689975e581ad4d84b50b7ba0f82ad574650054d01224c9f828f57434465a0e7fb567cc447ab32c36170270a27e"}]}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0xb10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xaa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xa85, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 06:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) 06:06:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c60) 06:06:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f00000000c0)) 06:06:23 executing program 5: r0 = memfd_secret(0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 06:06:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 06:06:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xc}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 06:06:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2279, 0x0) 06:06:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c78) 06:06:23 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000001840), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 06:06:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:23 executing program 4: syz_clone(0x14062100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:06:23 executing program 3: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x7]}}) 06:06:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) eventfd(0x0) 06:06:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c90) 06:06:23 executing program 5: r0 = memfd_secret(0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 06:06:23 executing program 4: clock_gettime(0x1, &(0x7f00000001c0)) 06:06:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 06:06:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '*\f{]}*%\x00'}]}, 0x30}}, 0x40) 06:06:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ca8) 06:06:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 06:06:23 executing program 3: memfd_secret(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000640)={0x2, @vbi={0x0, 0x80000000, 0x0, 0x0, [], [0x7]}}) [ 770.246046][T18251] nft_compat: unsupported protocol 0 06:06:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4081) 06:06:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xc}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 06:06:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0x1000}, 0xe) 06:06:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3cc0) 06:06:24 executing program 3: syz_mount_image$minix(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000380)="e5", 0x1}], 0x0, 0x0) 06:06:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELOBJ={0x14}], {0x14}}, 0x3c}}, 0x0) 06:06:24 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) memfd_secret(0x80000) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000480)='!', 0x1, 0x499}], 0x0, &(0x7f0000000640)={[{'+m!'}, {'/dev/infiniband/rdma_cm\x00'}], [{@audit}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '/dev/infiniband/rdma_cm\x00'}}]}) 06:06:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x200040d6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) pipe(0x0) 06:06:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none}, 0xe) 06:06:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3cd8) 06:06:24 executing program 0: syz_mount_image$gfs2meta(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f17e35b1d67671b956dba7a3eb84f8b3455a7a6d53d"]) [ 770.762182][T18281] loop3: detected capacity change from 0 to 4 [ 770.777232][T18281] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 770.822319][T12268] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 770.822359][T12268] Buffer I/O error on dev loop3, logical block 0, async page read [ 770.905694][T18284] gfs2meta: Unknown parameter 'oã[gg•mºz>¸O‹4U§¦Õ' 06:06:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_bt_hci(r2, 0x0, 0x0) 06:06:24 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 06:06:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3cf0) 06:06:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4044014}, 0x8044) 06:06:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0x25, 0x6, "89391159452f4bfa73ca028d956a01a04905ac1145fbd87e0315266d84d4419d9b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "2c4d311576"}, @NFTA_TABLE_USERDATA={0x69, 0x6, "9197b555e1a4fb9b2f04f31ec508e834696e04055e9227cbc7bdd64be6fc428f307db98c27cedb2d8f128ea4d1fb0fa8f349fcd104eeb82a2f0de408b3328c9d2f1634e3d815f960089c3be339870c824ca897413e445f2f4710fa0bbad539d69b700b8c75"}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1ca0, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c80, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "eb5405e36a5cf665586e9f1f89381ff6ce2b4eb2de79b53255b1f12ce0abd8e8493e131bdb1f51a88b9bac0209e650232d76f329b1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd, 0x1, "2e989847769d267622"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x69, 0x1, "bfbdd6e00fb1b96557dd5811d1c244ae06e51bbf2b917d0a07e9ae469a2f69bfcd0c05797f155452a018fcd0e1684b9a689975e581ad4d84b50b7ba0f82ad574650054d01224c9f828f57434465a0e7fb567cc447ab32c36170270a27e18ac7be1b2980d99"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "3ec12f7b69c3405c18fbb54fd303d87e899a497a97f2a5d38b74c7c9c218723273f479b51e1aca9aa5073d8c3e644653cbe17a8c2b4aa496bbdeaf6f0dc59d02c6c4f3d0d97359136e41bb508832223a6433ffc3b8758841cbe169c1740b614544891b0c0c7e02b2857a5cbdf61e17286df14aa9677fd07306c758831acbdeb18b5a116567b56b34c4298daa5c"}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1988, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "0d4002a4b2cea375ea"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "443ee1fcfdb4e9b7b92d71a57c6fdd6a4c70ea4d82833d54ce5666a7dfa4ea6c59db1b97221392101aad60e2549e891ff37b6c648c1ca270ac22649aa154d8e2859c00b2990dca4f8d50fd64e8dbe9a002e06dc65bd7e4f84f95cbff8c1a324c39f228b053fe6fb1c552bfa87e282c1a390733aee366d0e0beada99f0798cffab13a8795009202d603f47074b4f50f28b48d981a91e6b319e43058d6b4a3f479650439d011a1c3e43ba093eaea"}, @NFTA_SET_ELEM_KEY_END={0x1804, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x769, 0x1, "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"}]}]}]}]}], {0x14}}, 0x1ec4}}, 0x0) 06:06:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0x25, 0x6, "89391159452f4bfa73ca028d956a01a04905ac1145fbd87e0315266d84d4419d9b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "2c4d311576"}, @NFTA_TABLE_USERDATA={0x69, 0x6, "9197b555e1a4fb9b2f04f31ec508e834696e04055e9227cbc7bdd64be6fc428f307db98c27cedb2d8f128ea4d1fb0fa8f349fcd104eeb82a2f0de408b3328c9d2f1634e3d815f960089c3be339870c824ca897413e445f2f4710fa0bbad539d69b700b8c75"}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1ca0, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c80, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "eb5405e36a5cf665586e9f1f89381ff6ce2b4eb2de79b53255b1f12ce0abd8e8493e131bdb1f51a88b9bac0209e650232d76f329b1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd, 0x1, "2e989847769d267622"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x69, 0x1, "bfbdd6e00fb1b96557dd5811d1c244ae06e51bbf2b917d0a07e9ae469a2f69bfcd0c05797f155452a018fcd0e1684b9a689975e581ad4d84b50b7ba0f82ad574650054d01224c9f828f57434465a0e7fb567cc447ab32c36170270a27e18ac7be1b2980d99"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "3ec12f7b69c3405c18fbb54fd303d87e899a497a97f2a5d38b74c7c9c218723273f479b51e1aca9aa5073d8c3e644653cbe17a8c2b4aa496bbdeaf6f0dc59d02c6c4f3d0d97359136e41bb508832223a6433ffc3b8758841cbe169c1740b614544891b0c0c7e02b2857a5cbdf61e17286df14aa9677fd07306c758831acbdeb18b5a116567b56b34c4298daa5c"}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1988, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "0d4002a4b2cea375ea"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "443ee1fcfdb4e9b7b92d71a57c6fdd6a4c70ea4d82833d54ce5666a7dfa4ea6c59db1b97221392101aad60e2549e891ff37b6c648c1ca270ac22649aa154d8e2859c00b2990dca4f8d50fd64e8dbe9a002e06dc65bd7e4f84f95cbff8c1a324c39f228b053fe6fb1c552bfa87e282c1a390733aee366d0e0beada99f0798cffab13a8795009202d603f47074b4f50f28b48d981a91e6b319e43058d6b4a3f479650439d011a1c3e43ba093eaea"}, @NFTA_SET_ELEM_KEY_END={0x1804, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x769, 0x1, "1dd8cd97f13017a89455b108e8dde224993953b3a4e849c9d3f9746f9ebf8f55c6108d26f3f317db34c6e4ef546bf76a9615a77df3d4fd4b612d322e5ad6308ef7f01d669489f42f26efa661918a74c26a8f1f9b81df704361e2eb6df7f2a3b44e43d1af386656e463990803453bda4aa77e1626e07dd7ae552e33abda3185ee23fb322ff498cdcbe5c8538542d98db51b847f2da6178a0812ba96d93cb901e2333b4face1c136eacc32bd6b4f694fe619a4b0b854740fad742ad318e3479e43447376f9192edc0aa1ff115c36c8ce2be586b414922b0792315f3ea36d2764fc0b1132402f9dd5b79a2617d00000ee1a9ed210a69dd09d637a3871ba2a5bbd98559d82fb6677bc25e5c4135a3289e3c1358f271c47d696269fedf9dfc44d336e23683506814874f1ae929864c5e29291c6f1566cd00ca3eb1e290d8dede32cf8aee72ec4bc1bcbb1891478e322912ebfd0afcf7347552c7dc8ee4e39dc29cfe4dc15dc9ddee21d48d05f75b14e6c8d329fd7d410deff805d61044a381030d32f273c32bb9e2dba53e9cdae30b6d41116d1864b2a494ce0d7791c7131edca138b0cf773d1099223c30b37285c1cd42e1a0a53c162f352b076d1601800dd7d2cbbdef1d33c99516dcb7c826974415603d067bd7f4eb436d6e5e0f76dce1849af44ab0f282be6dc5e10089a47cabc67808f8b6d0c11952987b284ccbd1a5b167736141b68d577b6ec4a224a4d0673bbdb55023ef5698a137130d09412c9dd1ff07051fc82684e96d27c352583cad4064238e06e38d160a70a3e50c1a9da89ad3d4dcb393287fab3570af0dcdd6735502b1368659c5c394fa15c65cdf1e5fb38734b979e46c0a45ffec1d379f63716be4d681e30c9808628acf14245cf1471dec254422cfec704f5dab52445f49fa4089b6945cfb925909b781b801cfb0807e7620807eeece0b43d7b07c71f7d03bc618d7d1a2b92f5b179d585a5f6a41f4fbf887d5edb03f9c84a37130fd9635d3bb8c8d43af417b3b970ffc2f9af2e43a6c64427cc9aed73e78201bbad347db0a7a6fecac82b3dce4371e570cb9f738483be4ab3cada1aedd2cc1453e541370c83abfd90dac4d4bc4a86646175f562304e11fe1fc878380f98671e1330e1f04992ab4ad5f706101493562903dc73c8f0f138024d4a13af676e365fa5656891aada78c7db1fdbe0cf579816d143619708c3f3e980b0eb6003d3f67586207828236edffaa9dbbebb8d963a859eaecd58bb84492d71d154364ac9fb195a84daa994f6037089469899ced4a7e1f9de31d3e182d0014950739376405b4d022ff8ff1e9936a633b7d7623435e0bb43f51658592c8c466993f6c971d7cfc2a6e41ba7f38cddf1285532ece1f949a898185a11738e0ee7ef106cb0b6e174c3e990a7e0e517b7dd15ad17c536c0c75a7bd81f656a7bba310bc13cfc46606734f0a7f4fc8f58b1d954068b3d0d408242e5b3fe41158aaf66db82ad006d0db851e0e4de6aa48652e166dd48c6ec456e4cfe0b9eb0099241f0f6e51f32f7f1f167319e233e855871c78dba56244490f5e8e3712382edc151aedbf787b1578644e3381b90680ac39e49ebbfa655eb164526461a324205435f4f4ca55e260a2469b6bbc332972cc1c7810edf092597f2d4396a1c2eb4324133513bc2781f94812bb1d1d6bc990832aee369afedd0ccc6e2b8b3cf20ddfb570c823ed2fe98069434a18ebdec4d6e187af5649a5c77509984c004ebb42f19d14e31345453f9f0d6d3feccde0cf9b57c29782dbfca9241525a8f43058cafe7cc79bfe5049af779743bcf219a552222cb08384b375331aebf36ecd9e74c134b4fe12e373009850658789651be175c7dcd5283a0d09961bade0d7b4b901222106aca79ad00cbbbad6f472afa32884f58b0910bb82123ee7568d66233d112a8c144a2259168d544f710a549ce25a92f0698bee288a0cc44fbdeeaa5582e7ec0b71cc2be1163f7b5ed52355856280b7bd4b18e354752b673ba614d6d922f8c228965c314cc218e7093cd52799ed2add88fab090f7017a348772c98fcf4336dc45dfc1b2f945510f0a4c23b68d92cf7444cda51b65efd8d8c2e411ad2505b15a7d2b845ebc6b8d1a6404bb2df45df9448261d42d777ccee22cd97b8ccddfeb1ed7c867d73c8a05241d39d9f5cbf3c05aa491e73ac77bc67ce2d5a307fc437f3af4fae1172cc4200c5097d82dcd1f58f3fa028410a83691ceb7e500011aeacd08bea8bb542940c814f432fa1f60bf370f839c748e026c5c5027b75c9c2021998f2ca13e19cccf51e694fdd9dc70a27cda200731df72c1da5e28479528afdcc67bebab5fe9a6436a13952b330cb893798224709fd299c5a2ae4fb5b9e3363f5d8140e15a1851b6685ad64acc87f0bb66d117bfa2c51cf2246d30189b635eac2559a9ae059e507f8c8facebb10d018859c7888fc4506ee3aaafb07e9e981830b6efd87ab2a9d5bbc2498b098f7d59583f24268993a54cacfdd689915851cfb7394c78a596e7e9af0eb82a3f84989a39a98ba1f2b6ae722b5711f07b555522ce019000156a0b27e76546d6261fbbe3db08562c7caa3760c28ba515e8d3e87c88524a811ee5a755ed7630cc2514fccefbaa586071304e2025f9ec2a29dbee5fb97a258c4b3872de5c1bd3f77b7"}]}]}]}]}], {0x14}}, 0x1ec4}}, 0x0) 06:06:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) 06:06:24 executing program 4: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000380)="e5", 0x1}, {&(0x7f0000000480)='!', 0x1, 0x499}], 0x800020, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000980)={0x13, 0x10, 0xfa00, {0x0, r0}}, 0x18) 06:06:24 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d08) 06:06:24 executing program 5: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) 06:06:24 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x0, 0x0, 0x0, {0x1, @sliced}}) [ 771.322536][T18306] loop4: detected capacity change from 0 to 4 06:06:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:25 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000380)}, {0x0, 0x0, 0x499}], 0x0, &(0x7f0000000640)={[{'/dev/infiniband/rdma_cm\x00'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/infiniband/rdma_cm\x00'}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000980)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r0, 0x2}}, 0x18) 06:06:25 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x2, &(0x7f00000003c0)=@raw=[@cb_func], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x25, 0x6, "89391159452f4bfa73ca028d956a01a04905ac1145fbd87e0315266d84d4419d9b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "2c4d311576"}, @NFTA_TABLE_USERDATA={0x69, 0x6, "9197b555e1a4fb9b2f04f31ec508e834696e04055e9227cbc7bdd64be6fc428f307db98c27cedb2d8f128ea4d1fb0fa8f349fcd104eeb82a2f0de408b3328c9d2f1634e3d815f960089c3be339870c824ca897413e445f2f4710fa0bbad539d69b700b8c75"}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xca0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc80, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "eb5405e36a5cf665586e9f1f89381ff6ce2b4eb2de79b53255b1f12ce0abd8e8493e131bdb1f51a88b9bac0209e650232d76f329b1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd, 0x1, "2e989847769d267622"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x69, 0x1, "bfbdd6e00fb1b96557dd5811d1c244ae06e51bbf2b917d0a07e9ae469a2f69bfcd0c05797f155452a018fcd0e1684b9a689975e581ad4d84b50b7ba0f82ad574650054d01224c9f828f57434465a0e7fb567cc447ab32c36170270a27e18ac7be1b2980d99"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "3ec12f7b69c3405c18fbb54fd303d87e899a497a97f2a5d38b74c7c9c218723273f479b51e1aca9aa5073d8c3e644653cbe17a8c2b4aa496bbdeaf6f0dc59d02c6c4f3d0d97359136e41bb508832223a6433ffc3b8758841cbe169c1740b614544891b0c0c7e02b2857a5cbdf61e17286df14aa9677fd07306c758831acbdeb18b5a116567b56b34c4298daa5c"}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x988, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "0d4002a4b2cea375ea"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f800000}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "443ee1fcfdb4e9b7b92d71a57c6fdd6a4c70ea4d82833d54ce5666a7dfa4ea6c59db1b97221392101aad60e2549e891ff37b6c648c1ca270ac22649aa154d8e2859c00b2990dca4f8d50fd64e8dbe9a002e06dc65bd7e4f84f95cbff8c1a324c39f228b053fe6fb1c552bfa87e282c1a390733aee366d0e0beada99f0798cffab13a8795009202d603f47074b4f50f28b48d981a91e6b319e43058d6b4a3f479650439d011a1c3e43ba093"}, @NFTA_SET_ELEM_KEY_END={0x808, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7aa, 0x1, "9b2b237c51ecf562ee7e492fb26994c6141f37191cb67ce5e62dbe3abed30ee5f6aec7c8c66fda62e4a9922964c817d239af4a81845ac315e0b2c7a45178779538433ea7fc81128a1905d518026f2ff99c9e80e48f759865d3cc6da6ac3dcbade5880fac1089820f6f952861ea9ed9ec45cf2ed3c20328f0f56459a1f45a677c4de0b195da98dc6c4be0dc8513db297ef90b4ea30262d88af6c632294db56bc298de3f7ebb10df4632e2c2e4f61e17d3dc46fbd6f1a1f00c6bd6a2270aed278964805e92fe4ef73d0b864d46af16128c80ae0ef83141ad31501370bb6772a3403412e36d4eddcf0d91fc0525b46c2d11e4d02294a960c29ed1827dfe957f2a6cfd07b589cef5e72589d902660d364d33fa11d655dbae273cd9884e7fc75a24a30ad9d3497f4505516182c3e02388a091dc8c021b1a16884c2d218226bf90dd3b21351f85c038e91b82459ef9d7aa4e05b6eecf36cd86fb38bfdb76835c41512cf65187379ebce63ee143a9d8f21c28183069c5637a67ef2aef138094bac5ba710e58623eee70640a4493ee78946fc7cc086a832142fcfc760d9fb9be0aafdcdb1706d59e31535f3c73d1b0d22c2e22311e6fc337ce50dbdfd34d150e1ee846c826dbb5ac9b4360988a9302bc601121d66dcb503e50abf89744a45647f7e99da78c13b1e5fc26b121e64623986ff50abed11ac6fc517e35a5c135f07e8ab8a5fd22869406cf4af3ac88ebf8c54eefe407c6a937db1f801069df57d8970bdad76e8f1bc543b7b67625c4ac3a186aaed6e38bcd2821a5600746cdb1a8cdcad515868706964ae82184bc88930362f7e0fa57a5c2fd70398b17c318876568db7910e931da6a2122c2e8e9b7080b28ecf107664b2d6aa3ee1aa2cd6ba07e68ac00011ec7f8328bd254cad4d4813de45cd298f32059dae699b28645bd0c383ff10b04000f471180a35487167ce3b8bb2e3aa8787998eb6514c9b83309e1785c10f7db07ba2d1bd3c1515f4b74fbaeffadf7d48c9754af78b0c33456fde434f717c88e6fb71e602ad72d184377202a6923206797b3dbb7b447d4b0a8e81870704ddab8a39c1099810c30c568888419e69da28b82431e5d85a8c0565e832b1302b275794988253b362917be1cf02c9e88ad1d67571d9e14f68464e8c7393467a18b0eee0af56e3a76ff746d9843d2d75c39f8e7fa56aa9a3fabaac0553f069198e2224df85e5a4ccb6521b1a19d1aee729f29ad0afa072f46cf49ffc2710588d2831195123f1e77eae9f46c034f2e80a1f04d92deabc9134ca15ba1f7f556a8fc753a0db9293fde9a1e82cd088a5b050fe93f10bbeedf7dde069f8c47f2f26715fc80679fc901cf8921fa089976b3ba6b79380f0c717f90963bb07b4e5ef59069c56769e3e5fa939de915ce79eaeb5dc866de9597d93a40a227d3a425e330df3519fffb7f9e887ae807a711247a98eb9c9f700cd6125f4868d2e80f99b59e9238cfe46ab25ef9caf8c90958e0f186e87414d44ce614d8648ce222ae02c1477495714bc5f46acf83111d3686ce0d5ccdd79695cdc025bc6b8bf5341a2fce33516115dff50a80eab06a899e57484137cbe088c62a13a196356c4c768b90f975b1f94d76973c26c04ae6fd466fc36fac1df38159f420df67401d4bf03b39b5f8fc4b7706d31ae44214fb6e25172a8bf8b9a0dd6f91b27c26b018263646e590efc4e189fa29419559009fa1ef884350fd1b540604e6b2cd34a5bea4c3c8733af51b666c7a57d604a30b63eb05844fd09cdaed3b5e5b893dbfe02c4f6f5a8b85222b4ed46bdea4deebbbe3f6aeea21099bec0e6fc27775178aed8eb2bfdb1b06f2f5fb947b77c6042e3309b932338494649e402fa37002060d727bbcfd5f56c5267dff3ca244030574033bb9fa652523ebb097b5d9e378cf2183cbe6cede6ee77ecd1bb24e3869d1be3e78bcbb9ca3b3e819ee04a1623928dd6f582ae0fdda74543a7e55010fb239dccc5f830a927cbd97fd5f17b4cdb5db3bb7cf4be50da8f8d74ea8027063ea8f19de3f92b8897e0b8c5535435e002ac47f82bfa62e7b57301d919bc22a67f00dc8f1163ad7d7e3ff7e62630a36042349c59fd0e9a0b2fa48d8d09e659b1726d1451e8eb211c718a2bb960cb4fe5903a017f0acbe8cfd79a679994f27481785c91c59ffaf1d78e5e68b31148de526cd845bcac28283f6dc1470b0e88ed7614177e7130f89ba5951cec05d6e34a487e94694c46eba3581927a25cd64a8988755fc9aab5b908a77494122eee3ded23a1d3e45162a0f5e2049560320c997b158810149098b72f7f25807d21a6c8bbf254bc91a261061cb5452424620e9d26e53c133f3d6396282c1ee605cc84e52a2e7238a9d69ae81310d54c3312c6fabdca938845e4cd405d1b41a04c6aee53ecf3189a6fba5d474ade858b15cee6a153968801574e90b5efd77bd8ffbfd1962ec3e098742343e8cc668d058b177afd9a2732be494ac9d16586421a766cb51f85abcf68e12626a7fed4a7c109e060d1287183e45b4135fd2d6b68872601976beb9fb93ab79358035f50308d5aa6cbb0eb627bb2684fb6bb20bc746d92fc5b7ed75892e751ca5b8d2522e9347e927c9e88c7b8b8c51f8b0733e85522f541209c20422c514dcc7fbcbeb16fd6b6d70c34ebd771809fa290dd9f97f29e54212908c0f27700befd8bc4a4d12f94bfcceafe703862979fd24e0439450e9b6e087508d42705acfa56e9336c1d98614dd5c05f196a5ed988dd922a9e7"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 06:06:25 executing program 0: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x85) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4081) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x20048800) r1 = memfd_secret(0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8008041) io_uring_setup(0x46bf, &(0x7f0000000cc0)={0x0, 0x29d6, 0x10, 0x0, 0xc}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004084}, 0x4004000) 06:06:25 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d20) 06:06:25 executing program 5: syz_mount_image$minix(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000480)='!', 0x1, 0x499}], 0x0, 0x0) 06:06:25 executing program 0: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 06:06:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x44}}, 0x0) [ 771.613910][T18324] loop4: detected capacity change from 0 to 4 [ 771.636999][T18324] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 06:06:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 06:06:25 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d38) [ 771.746418][T18330] loop5: detected capacity change from 0 to 4 06:06:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14}], {0x14}}, 0x3c}}, 0x0) [ 771.912369][T15641] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 06:06:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:25 executing program 5: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 06:06:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 06:06:25 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:25 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d50) 06:06:25 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000380)="e5", 0x1}, {&(0x7f0000000480)='!', 0x1, 0x499}], 0x0, &(0x7f0000000640)={[{'+m!'}, {'/dev/infiniband/rdma_cm\x00'}], [{@audit}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '/dev/infiniband/rdma_cm\x00'}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000980)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r0, 0x2}}, 0x18) 06:06:25 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:25 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) 06:06:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x954}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1930, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1910, 0x3, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf, 0x1, "2e989847769d2676222966"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x69, 0x1, "bfbdd6e00fb1b96557dd5811d1c244ae06e51bbf2b917d0a07e9ae469a2f69bfcd0c05797f155452a018fcd0e1684b9a689975e581ad4d84b50b7ba0f82ad574650054d01224c9f828f57434465a0e7fb567cc447ab32c36170270a27e18ac7be1b2980d99"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x53}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x17a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x98, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "0d4002"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3d}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f800000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x97, 0x6, 0x1, 0x0, "443ee1fcfdb4e9b7b92d71a57c6fdd6a4c70ea4d82833d54ce5666a7dfa4ea6c59db1b97221392101aad60e2549e891ff37b6c648c1ca270ac22649aa154d8e2859c00b2990dca4f8d50fd64e8dbe9a002e06dc65bd7e4f84f95cbff8c1a324c39f228b053fe6fb1c552bfa87e282c1a390733aee366d0e0beada99f0798cffab13a8795009202d603f47074b4f50f28b48d98"}, @NFTA_SET_ELEM_KEY_END={0x165c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe84, 0x1, "9b2b237c51ecf562ee7e492fb26994c6141f37191cb67ce5e62dbe3abed30ee5f6aec7c8c66fda62e4a9922964c817d239af4a81845ac315e0b2c7a45178779538433ea7fc81128a1905d518026f2ff99c9e80e48f759865d3cc6da6ac3dcbade5880fac1089820f6f952861ea9ed9ec45cf2ed3c20328f0f56459a1f45a677c4de0b195da98dc6c4be0dc8513db297ef90b4ea30262d88af6c632294db56bc298de3f7ebb10df4632e2c2e4f61e17d3dc46fbd6f1a1f00c6bd6a2270aed278964805e92fe4ef73d0b864d46af16128c80ae0ef83141ad31501370bb6772a3403412e36d4eddcf0d91fc0525b46c2d11e4d02294a960c29ed1827dfe957f2a6cfd07b589cef5e72589d902660d364d33fa11d655dbae273cd9884e7fc75a24a30ad9d3497f4505516182c3e02388a091dc8c021b1a16884c2d218226bf90dd3b21351f85c038e91b82459ef9d7aa4e05b6eecf36cd86fb38bfdb76835c41512cf65187379ebce63ee143a9d8f21c28183069c5637a67ef2aef138094bac5ba710e58623eee70640a4493ee78946fc7cc086a832142fcfc760d9fb9be0aafdcdb1706d59e31535f3c73d1b0d22c2e22311e6fc337ce50dbdfd34d150e1ee846c826dbb5ac9b4360988a9302bc601121d66dcb503e50abf89744a45647f7e99da78c13b1e5fc26b121e64623986ff50abed11ac6fc517e35a5c135f07e8ab8a5fd22869406cf4af3ac88ebf8c54eefe407c6a937db1f801069df57d8970bdad76e8f1bc543b7b67625c4ac3a186aaed6e38bcd2821a5600746cdb1a8cdcad515868706964ae82184bc88930362f7e0fa57a5c2fd70398b17c318876568db7910e931da6a2122c2e8e9b7080b28ecf107664b2d6aa3ee1aa2cd6ba07e68ac00011ec7f8328bd254cad4d4813de45cd298f32059dae699b28645bd0c383ff10b04000f471180a35487167ce3b8bb2e3aa8787998eb6514c9b83309e1785c10f7db07ba2d1bd3c1515f4b74fbaeffadf7d48c9754af78b0c33456fde434f717c88e6fb71e602ad72d184377202a6923206797b3dbb7b447d4b0a8e81870704ddab8a39c1099810c30c568888419e69da28b82431e5d85a8c0565e832b1302b275794988253b362917be1cf02c9e88ad1d67571d9e14f68464e8c7393467a18b0eee0af56e3a76ff746d9843d2d75c39f8e7fa56aa9a3fabaac0553f069198e2224df85e5a4ccb6521b1a19d1aee729f29ad0afa072f46cf49ffc2710588d2831195123f1e77eae9f46c034f2e80a1f04d92deabc9134ca15ba1f7f556a8fc753a0db9293fde9a1e82cd088a5b050fe93f10bbeedf7dde069f8c47f2f26715fc80679fc901cf8921fa089976b3ba6b79380f0c717f90963bb07b4e5ef59069c56769e3e5fa939de915ce79eaeb5dc866de9597d93a40a227d3a425e330df3519fffb7f9e887ae807a711247a98eb9c9f700cd6125f4868d2e80f99b59e9238cfe46ab25ef9caf8c90958e0f186e87414d44ce614d8648ce222ae02c1477495714bc5f46acf83111d3686ce0d5ccdd79695cdc025bc6b8bf5341a2fce33516115dff50a80eab06a899e57484137cbe088c62a13a196356c4c768b90f975b1f94d76973c26c04ae6fd466fc36fac1df38159f420df67401d4bf03b39b5f8fc4b7706d31ae44214fb6e25172a8bf8b9a0dd6f91b27c26b018263646e590efc4e189fa29419559009fa1ef884350fd1b540604e6b2cd34a5bea4c3c8733af51b666c7a57d604a30b63eb05844fd09cdaed3b5e5b893dbfe02c4f6f5a8b85222b4ed46bdea4deebbbe3f6aeea21099bec0e6fc27775178aed8eb2bfdb1b06f2f5fb947b77c6042e3309b932338494649e402fa37002060d727bbcfd5f56c5267dff3ca244030574033bb9fa652523ebb097b5d9e378cf2183cbe6cede6ee77ecd1bb24e3869d1be3e78bcbb9ca3b3e819ee04a1623928dd6f582ae0fdda74543a7e55010fb239dccc5f830a927cbd97fd5f17b4cdb5db3bb7cf4be50da8f8d74ea8027063ea8f19de3f92b8897e0b8c5535435e002ac47f82bfa62e7b57301d919bc22a67f00dc8f1163ad7d7e3ff7e62630a36042349c59fd0e9a0b2fa48d8d09e659b1726d1451e8eb211c718a2bb960cb4fe5903a017f0acbe8cfd79a679994f27481785c91c59ffaf1d78e5e68b31148de526cd845bcac28283f6dc1470b0e88ed7614177e7130f89ba5951cec05d6e34a487e94694c46eba3581927a25cd64a8988755fc9aab5b908a77494122eee3ded23a1d3e45162a0f5e2049560320c997b158810149098b72f7f25807d21a6c8bbf254bc91a261061cb5452424620e9d26e53c133f3d6396282c1ee605cc84e52a2e7238a9d69ae81310d54c3312c6fabdca938845e4cd405d1b41a04c6aee53ecf3189a6fba5d474ade858b15cee6a153968801574e90b5efd77bd8ffbfd1962ec3e098742343e8cc668d058b177afd9a2732be494ac9d16586421a766cb51f85abcf68e12626a7fed4a7c109e060d1287183e45b4135fd2d6b68872601976beb9fb93ab79358035f50308d5aa6cbb0eb627bb2684fb6bb20bc746d92fc5b7ed75892e751ca5b8d2522e9347e927c9e88c7b8b8c51f8b0733e85522f541209c20422c514dcc7fbcbeb16fd6b6d70c34ebd771809fa290dd9f97f29e54212908c0f27700befd8bc4a4d12f94bfcceafe703862979fd24e0439450e9b6e087508d42705acfa56e9336c1d98614dd5c05f196a5ed988dd922a9e757314073c9e2488e557859082932a2e4409b99d2e2613477380248e473618f11509c40cb4bf20c7873915e85cd13ec5bd7ec11c979531a729e77e654a2b7481f42256756118e64a6584e679b63f78323015df8f60fcdc25c444c106d52f523096c560866d44a6c12b2dcbdc774b98e4e2ee7a603fbdba026aa085c9d8f6f580cd80286370d77f113da7081c655e50c6406101eaace2a53049b5b7394ab58c9996ad04fddf5dbc8428f1ba37dfeb63c71b82bcbc8a33952d989ece16edc771843d0fc899d81fea8758bfb74d3bcab91cfd5939a962ba067ed509e571fff6176a49fe0baa86a02536eecccbe3e6cde15c427ca0e84442fe914986df57a01ff1eae0b1ba803c13bd72cb4e432afb8e881c930ad34603d6193a11057c263939c2a953d486eb33e6d215ac2021d6ff5d42de46392e361b41d615f39a68435be2f96ad4a3848d918ccf5029628154f0224e95573055793c6bc6b0ddfdcacb36f69c9373e0624a7db4e9cf3e5eb47b641c6a20b611eb3f7d0ea84d593c851a6d3d2b6050bbde2a41c5dc7df2f314b90db1c35c0dc31b4fee7e71a643fbe042d646b3d7186ad77eafcc6850ffb2a6dd6fe2a4614167b6f55eb0863e080d5d0b6dcd18df3fa2a8ce53f62f34d6d346516ee116d1b4ca6a7f65890b5cf31b180703f6eb75916afc2604d1816f11cc5bafdd7d1b3a438e7cae272538ecefa791eb6eee01d9a16571f208e06340cdaac4abc75cceb34ac778819c710f94e45bede5bbd92e100f315ef46f1c970ba111c479b1fdeea3d8e88443c632671a7833c00414f38697ecd1a736ab14160d2ba084bf3c8f5f16f335f16a5df0a639bef2eb6ee72ac0c4087b37921750f4bc18638e4d6e6124d09d3d7d8060910c5d5f62dd0ba17d1d8f3a8a2eafee9dd62f766f14d1fbabf2d8ef11c865cf737d066561685ee48233b77e64488c58d4c8e72b3a65a6824e78f3fcf7fa386b8be23ca5b0c97bfcb2133b26a1fe144a0581b16bd3d9d446f6a1fbbdaa02e87c1e0889d56c9d2f586471e451ed2ddb56d4aa48f40b278d5554bd3bd69355a918ba01cb24d8f5a6555a16b1e7587c5c0be3a951eea9df61c6d2b51d6c6e220c25ae0dfbdf8bc1b26338d0fbc31351509176f858449b9919b074e61b7938eac1ae759b7c059693c46fc9682891e4931af3eb6945e74427b6c2065fd9149db9eb79a9b56f83faf824cf3e6a4fc8adc62d7e0b636188022dd6fd6f3753cedbb14b78209b05c19499c787211a78b51418b16742a6a88d8139dc58f45b53b868b039e1c4a3d9b9dea260c4f506d78c63af69f28ed39668f6b6588123279ae7d3ed74e82f95a6d4f5f5ac9d1ed1fce45f3277fd554b108b5a2c2d8866e2d95d01e16b22e242daede0fe4701726702b79bd444ae589bfb8cea159ad11bb07fb77d2d1c59c88afe34e45e0dc4093bd596be01f565810b018dcbb6658909bb58299e5ddb0c8211b15f3ba54d3edfb1f4b0052c85f244d2e4cf25dd20a38a0a95c62d82b6e9acc3fb736c929d109bea7786756eef932fd4bd38613661418b03abb71e82ba303cd858fd792f9694c3d0014e868fc2cbecea730a5896cf819df1a507412f529e8da047bd65f7e9b01b8f46852dd020681f2c4c27860e4bc565c4e3513967def3ce5d2eec4d855ecfef9c38256f9f5b5e07d1cf7a3e8deef0140bfa0d7dde0d5a98c8829954559d8341e720062f65f4d5ecdbae0a5343640db1ff7f2a51dfa308f9a2aa836865dd9a95e61d537ba1dff8f911b93a02c2e9e3045b46248ff193c82b5ef16ce538fa2d14c33ee4000985e112afa6289a8ad04c3d0d28cd80f67d7157bda0b24737a3179c34d20a17b297e08e338d85391ffc43d0db7faeb2fda8940adea8415c453595157e6c72e408d99b83e5c7f69ae9f7f1cdd7c11adc1e8799a4faf9963e079bbb583cfb04336a8e9de98eb702dceaf66959d13c7f6082b560d9d8c9fecc0af9f86299b4b85891b0d996e5e4e3568fa85e9636f88f7fff8ea6038b31d2bb4a7e152d9e66c7e4445bca5d14447303f447552fc8a0c5ef5b1905137765ba72635d2d5a53d4a7c3ab5c18ce0a4094b73b530cbaa5b60bc77aee2570e29d42942aca85283aa493331336e5bfa2302bbd34bed1e5f9ae8603b593a4acc2cb97ec7397eef9dbd7b9c3e9f4229bc1c7e8134dca2d44bfbb12c184f1b576b974ac2e4727ff2e29e177fff8e3c2cc78490aee64b019fa6591d3eb82e58a2359217e8370216eaad3830b7307abf12ff66b9266f72641559535e9a00052a216821abc4498bdf12d936e7f1cc1840894a678c54c93909566a06689521e6710bf9aedf2a81a29d62b4e8141abe684fa43bea7ffdbfcae8402f85fe24b1f7b6dad82594185f39044491dbd7dee5f82be8ac0c393191c8bf918d945754aae848892b611cd929a990b2531073755a226f5ef8681ce5131f4eb1f0f6b15c72649d9b905c7b68ca"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x74}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x765, 0x1, "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"}]}]}]}]}], {0x14}}, 0x1a50}, 0x1, 0x0, 0x0, 0x4044014}, 0x8044) [ 772.111401][T18347] loop3: detected capacity change from 0 to 4 [ 772.137337][T18348] nft_compat: unsupported protocol 0 [ 772.137495][T18347] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 06:06:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xc}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 06:06:25 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d68) 06:06:25 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:26 executing program 5: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x6b}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x101]}, 0x8}) 06:06:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$inet6(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x0) 06:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 06:06:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d80) 06:06:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) 06:06:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) 06:06:26 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) 06:06:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d98) 06:06:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5423, 0x0) 06:06:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:26 executing program 5: socketpair(0x28, 0x1, 0x0, &(0x7f0000000180)) 06:06:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x61, 0x2e]}}, &(0x7f00000000c0)=""/218, 0x2d, 0xda, 0x1}, 0x20) 06:06:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3db0) 06:06:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x103) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 06:06:26 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x519a82, 0x0) 06:06:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 06:06:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 06:06:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3dc8) 06:06:26 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='.\x00') 06:06:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:26 executing program 0: syz_clone(0x5881100, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) 06:06:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000000000000000850000005300008095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000001480)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:26 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3de0) 06:06:26 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[{0xf}, {0x10}], 0x20}, 0x0) 06:06:27 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x300, 0x0, 0xffffffff00000000}, 0x0) 06:06:27 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x61, 0x61]}}, &(0x7f00000000c0)=""/218, 0x2d, 0xda, 0x1}, 0x20) 06:06:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3df8) 06:06:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x2, &(0x7f00000013c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xea, &(0x7f0000001480)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:27 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002080)={0x10}, 0x10}}, 0x0) 06:06:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r2, r2, r2, r2, r2], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r2, r2, r3, 0x0, r4, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 06:06:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e10) 06:06:27 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:27 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x141483) read$FUSE(r0, 0x0, 0x0) 06:06:27 executing program 5: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/4096) 06:06:27 executing program 5: io_uring_setup(0x71fe, &(0x7f00000002c0)={0x0, 0x0, 0x2}) io_uring_setup(0x6303, &(0x7f0000000080)) 06:06:27 executing program 4: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x541b, 0x0) 06:06:27 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e28) 06:06:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) 06:06:27 executing program 4: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002780)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0) 06:06:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x50, &(0x7f0000000040)="3d6e801e504a11b1bddfd1a61a5ecada3ed5e1cdeed3a7efe928355ed4deef56b501bd92591ca8a280ac0abc960f8f8cb9ce5f4828d03c10d3d49805a96d38251ee40ca90a607663d51158366ec1a96c"}) 06:06:28 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e40) 06:06:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002780)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 06:06:28 executing program 4: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x5451, 0x0) 06:06:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKZEROOUT(r0, 0x1277, 0x0) 06:06:28 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e58) 06:06:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a']) 06:06:28 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0x10}, 0x10}}, 0x0) 06:06:28 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}], 0x2}, 0x0) 06:06:28 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e70) 06:06:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000f00)) 06:06:28 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x1260, 0x0) 06:06:28 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3e88) 06:06:28 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 3: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 06:06:28 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="90b81a56daee50839dabc32719f0df54", 0x10) 06:06:28 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ea0) 06:06:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'gretap0\x00'}) 06:06:29 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) 06:06:29 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:29 executing program 0: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 06:06:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3eb8) 06:06:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002780)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x2, 0x0) 06:06:29 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/76) 06:06:29 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ed0) 06:06:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={&(0x7f0000000100)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0xe8, 0x0, 0x0, "8c40ec8b367822991f519737dd057b658c25cb3337818aa868bcc9d80b753695145a4f1af9ec06725bf5e5ff20150754dd2489b0daf3d63306ad165331952961bfb92010be9c949f35fca99427c2af6e0433014e6f0aa1db4eebee1fb5f72646912f224bc406f3834bac9a93e56811db792f82c3bf4e5954fd1c0edd15e71b74912319b4c552146565ac85a8f8bddab2b1955507696a07e2a933486e5c6520a128cdc0ef6bc2f06c1b74fb9fa6133d8f05c09ef097378984d2a3fa8e2cd4db0ccdc07ea5076f5f0bbd49d44f53a5dcae10"}, {0xf0, 0x0, 0x0, "8b44b8dae93b011e99db69f2ad8cf4a2160152d78f3fe7b1945fad291e95b6ce871e1793d5c8548a73a8022add5c69510ef90b1cec6c93296dba0ff2887d0ee4fef927b0a24082e05dac49175b8486f0843dd6bf73c30a5266086cca6aaa2ef39a8fb176e89da3ffa2692d1f6803432e3b1aad5dd82369f0c14249f441f774a5e21937045827e86cfc78b81886f7fee297e395e9233f60e7700d94a35ed40cb88a661095f3450514755da525dc78f016762e97080696cf8eb552ffe44716f2e76ca922b31330e8bb32e6650a1ae503077e86955ea011edcf69"}, {0x1010, 0x0, 0x0, "a5cf1347419ebd6f768c639bac2e1a37792c8c40094e494dbcace45866d22503e2cbb6ae7baed597c797485462cebffb3d4f6f50d39710dc8fca6eed1eb8692d744c418cd0b1a03734845f5fe752d32911331d161ed37f06d85c4fafc63af043a201f6a18d45111da2775af71e7470145d87b4a3f23682730c994f9c51e892b7bf6c03aca9f0cf65b43d477d29bba0cec7bdaf8066c3a7dd64a3e06d15f0c17771ae4d2ce04619db84ea084418245f078514e881825ebd927e3d439ba15c59460a8706e5959900d412c3373e034064b577016ee97a184057764bfd01fe1f08702a0cab9c49084fcb847919aa4dac81b5d11873189010305e89e0e27bea6027778ec0e5cac72b7a29fe57ea3a46acb226db8082c5dd97a627da7e6e0ccef59c779d9aceb50dc93eb410ac18ffcd6172cc161f5abb6f1a9f6cce501c1bf75d5deccf195c3c11523d184ceed52c36f308bdd350fb51086536ea88bb5aaeff1ba4a5376c04cddbfd5ec3beb3458bb0e5d4cbad94af83962f5c126f7a079adecf08d0c287a64959c1bea18aa06e18f0dc5b3abaea4a6015fafec870d129b31053285addb9452d8f4bc2a105154521eff54e6dc18809d1b2d1cb56b2435ecb4f6a8b6774507e93af75f84c44f425e13ea1fec27329f00a29c3d51b826f9c5aa7f301a6ff6c43665d20fb598f7ba425ea6a1b80284293a29b2ca033606e9c580a351c8e4975774725499a976e1ed42881ffd5851cb49c5ebbdea1a8c0065e8009d4620426c0c798b7c50350498d919ff5892782dda7b4b3b91548c54a6e4d2aed9dca7a64b680e8290e5426fa4d1e6e655904015d09bd6e0274fd809d2088fd356411ad8de6983cf0c6d4ad76eb5607dc1a521dd1c3ac0d1c244a1b6fa20cac5dd5e8b79664432b316bc724a9b8ce69689dcb461f31d879e06a9e4d6bf98d8dd05a0ad087fb761b11b531334dd0311106e37c398efbd064000e519afd54c50c5bdf39f06eb7299717c3ee6dce0c3a7c3fc07ee9ef28f371c932e804e5939077c9d158bd2f76d699faf8288959caedc61548c1c864aeedaa2905fd60fc6fe8b916abe28c2f766e73e9b507241d68b3b57d6a3da1a232f6f9a5e3db18d4b2b97584db45df0d239931f7bcb2b46cf84561c16e8ada0695a941b1f81c799c478f8fbefdf9528f8844febc08e1cd3e64189bd66e529c93d7cf11f8596dde06dcc909ce8dd092c143d485997c9dfbd8875aceaae78bed2d0fab75d497edae2be5f824fc7892efb79f79bad75ad95ac888a2d90dd0a2fed6f020b245d1d79674c6d4c5c6c58a9b5f7c6ee9cc1d82ea3b4025c480d817dd20824d7e8048a0baeea87e312daa88b3a692c9ab615fd20f4d43df75f130abe6851e3abfc774d65ee8d5a6194c4890417095714d3388d373a454ab8153250b13a779d6eb94f8c1995b837efd193ea39f82aadc7cf5eca602764290d7ae6418a31439482145b40bb9677b34021f09d1b1f121c5a66f9d2f1f0df994f717829db809fd2dc2f5ccd835240852ec55c3148a4749fc0662ac52abf5406d79f9d97e2294222be02a5c3b413bdbbc22d0f2fc9c110a1ff55a93f1dcfcdb044a08a412ed465da290633b255e02370864a20decb2adf5a8633ad7e8373cbd85edae24fb6f976c5332d01f2024c816b28f76d84b06b557d949c09af8d2e39334391fcac6e7a51dea715eca9e1f0ac33e5b289286a4c4b8bf3e4455f516a544af5a4c7fc85a7753a0e5d0ac7a42b15aef3d4bd9e8414ac8496c2b8e988016b73e0fb7178fb072480f52b8d1d53f6c32e27cdb5ef6930f1d95e7a1c52b0e698c9484e09677319b520fdc8b4686a3573b4fecb7e855875b3ed05fe43322dac6a2f873c39ef2c1dae5938fd858a215b39d705ec86f40cd2edf9627ba1e56310011ce6834178c793935f3250b5f0d4f1addfa8325db66ad9802961495328159aaee913a8c0d939fce0804c5d836acc58fb55189264d841f11e08f994d16f092564798c9d22de7f2485736595b5751847fcb4c44eaa8768af8db6a0f3bb1ed5f88e1b188fdc974dede8468d2a22d78ffafac9c02c6f05d872b7aa384eefbc677a66492e842b480b4b3702e93d6320321fc9e69abd2de6f7ff9f00d7740aa0743ca5333fd0eedd8be326a7a8f3e03250d46ea7d05d441b3ef2ce132dc703abb118091f66255f23b17155c9b152f418019b6e7bdc12f694a1ec464fe703c5e55d4e636b0401c62cedba696fe97d4ba910baf6dbb44bc54df62574c33c617accb47695f1fc484d483e74705cb2b1f7bb7b1b47e0ee8a6d8b70e2315b2e912b2628391abb5a8e83d7f7be6e024dbc9a0ece9d5def1b0435ebe85c194af74630855b9bf23ad680bc4058e1d3ea28466254c149aa934ee8ce7b72f3c445e9906ad0346c5ec44461e68ca0aac23bc946c77f2283a4504817bfa6586e9fd7ac365930a74dab3f7a4a7d9dea4e5cd0a07c0135ac8aeaec834f52e662ea95bd3696bbe693fde828b17d0ce4e06ec4c23dd9760ced0597de3aad559f38e160bb33b2936d509a17a249cd09b29580c175290a60e5ac5d5beec1ff5dc9700d0d59be06a2558255d65420a41f7c3c171644ace1db6a0072ed674fb1a04a418a4ef0329266d3ba8c2ee7c735c4b0552ab679eeb98edec37794bdcfa237a679205dcec6cf14b8a203e4903ef7e1e09526032f13d2f9855babee0976d913ec5dabab640080eeb7bb28bcd52b44f3520996b552387cc051d0957308276d84b91346eb4665da2bd574c25691169051860f0642f6a6af813fc1e23bf706a228416630d433851c6eed09d16cb7f918e0f9a348eeec252f91159992a2b3d1df22bf9ef847467581db0a5b11047789a62dd21ae85e0b52fc0bc43e90b2bc676c0475846e2565c5e8e84bf56b10b06e0744a38d2127ede5669a23584b53d7deb8c2d2354d2b09b408c6c86012a67a62fd375904b70fe6872126e4755c4c71115e8b077bcb27fdc8a7824fa6a5b62d382e9f3c3d7831f7f412c4b7b81923ff451b40f3a3133dd430f2653fe6cc870ae31ed5f917defa1f21cae71644108fc0b3258c83cceb75ea32d9b856d3cf06e21b4d05f196b71b84e15c3a0f62b2047120f092e9877e59e1b3a34974c876876f4064b5b33d83939df86d95a6f0bca3451b841bc26840517187c1c5b968ec9d96859a8a100fc44311e01f2b2d7a57c087cc3ef4d945bc83d62265a4fca18bcd89348e2f8b9162e27f9cd7d6ac5405a45350482190c5df2e379bbddc40208d65072e4df8a51056a9eebc9d581adfa9bb58c81dbdad021cf8d4243e973170f38ade224c56ad20921ddb75c54e63534b0f39c9b5d39a439a74367d3307cae26d74fdee2e337b66309d55c74eb46f553e83e0da9dcdd81d9e3365aa87802541cfcb7dcc4eddd684749866de91d8019d32ab58fa40d855f61528a815d420697c2a74a064c2a1b8aad32012dc1e43c8c9c13656a3cb97478bd5b74e27483fe48b91a9dba6e5b0e8144df8489b32720cfc6d344711780b3ed38b426a6d0d1647aad55ce23d0d64b0f87b7f75548147215546f6046f9976d7cbab3853a2ced6d656273cfbdcbf910e700b0ecc52e2b775822483e4f6b94732c27ca94859c8bd5b6eaa96cae3a1de20a718d5c4d71ced9e226c847ba9469f5ee5f48a3efb2b7a61fc4c61b461b90750f5f1092df3b55430c413b75cbd450be5a577d8836d50cfa98467b288efe787fe829195c7228907366b9519dc69f293b7e99ba6634ebf9ab9da65eee1f81f314af9458c18cc44aad860a5a79a269f211313bf7e4c7f956a382443bd0e4621a9ed0cf5fbbfd94cb8a5b5b89b960eefda1d83c2c0f8ca5e6dfa7e7ffe6e7532f7c4bfbdcdab50fbffe80dbf90eef6f7e9540b5212293b007268d973681765e761131dcd9a743544135a583a960007b981219c6e65b25f0cd82ae06c391141659b0d9ee73019bfecde49885aa85dec6fa9188cd9ecc27fac678fec1983d459ac7c84b6661aa1a5ef6fae0811ffb25f0f644661088a6d86acd6468abff31a062366af2339166a5e1648e4b9ccc43de366925d1d79d72b8398b205bc91acebeadcc09d5887f7756b33fd13bf38bb02d101885dcdb0d92174fec927c3c0ac382a5297b41e937a5300a6da6a6395ceb6ffa5cc3367f219a04763762bdbeb83c9e67d3c41a5319af411ce08bd83237d76c429cbed77713c78f2d117ab033ab689b4326b405e112898377ecdb328f260c8fc331b0562e3137832e11141b7c92d5d2dc4de7dd893b8e0cb13121fab74dc52684e3d57384675b04865bd8f74dceafad2b9722c04cc7141c0a2d591fc16b2dcdce8bd16d346255751efd159eb22365f339d47cd5675228804e1b953fd2060955c54eb400008d087aecc371a7354f42cbfb3b06cc1e07ddeeeddce3b9d70c452b37cfb324a5b8cc93924fcaf1bf6b890fd847502582c463a0e4b1e442a408693a5221f931a01c0413e188f5bce45f3aea4af322f66a385b04e629ceb94583c458ec9b18da898c2757e8b08d6a6c55a30700706b23461100d659b944a3f8338411ee262d1c98db4f844e1678d1535ac6d6e5c185e7f0d386ef1fa1773402d17107c47fa44dbf4847757c238a82917d468e82d8e044afefbefbcedb971e75f6353ec5ed7f22d56e03886255b365358831284022b4a5d33f64f0d010b73481062e9eaacd6f5fed5b53ba02e9d4411ea85381fc4ad6cc4a0f1865351c7df197c112d572cf1431f789e6d88875a82c75547d68cbd77f91daa7d15cbc2169f4519650be630e55ccb2792dcebb708ae97c69215c84e7a9a198a653ca6077e8509c444950096acf1ec44feb5d665cb0a5dbe14d04011b6c60934a37630adc6977dce0842ae18e5a327f1011c5d14a927ab87623268f568e4b6cf03108bc77fc2937af33da70264143c0b8ca3a6279150dbec7f231def8fcb59b0f3103c41f526b5d0488d6ee6a9e60f583ebd6dbb21eb43ec55417313fc08e84657851e223c9c3de7dec41ea460e5f654af43432309856d7b1949d128a07d23b85af1f69ed2ee59d0df473c4fefa2bb89ace92014ac0eadfe9a271c45fd2517176dfcba6de1c63682b3816b2aca105fe819246764937fa846d93ee2259ad9d6d86959709a96f607a3b7a014ca14b03f935ac57b89519b6c300437b5586cfa193c69537fb158f4c55aa36efe75555de03ee1c71c776159a730238832486403670ecd03a79fb9b82ace5361352b61b6ded9bc524267b849fc61eab8065e85a783a5dfeffa1b5046a87fea25bf6427b33043884c4588668bb94c0bf0c21c14cc4072459aeec46bcba1527014552d72a9dd29f23138cbadc36cb97efd2c9116108985087d1ffaa6b6438021e40b2491a4a1aabbc6001708d36188284edb1556a557166214eee76d4918a5bc282c440a6a0ad8b09fd36e1bf814063e3d93549e6ebff3e8aee33797fc2bc51f166f169ac9299b8ec5bef3160aee1aeb9bbee93f150f5bc7c61220e68acf0b9ac59dca17b820c700ef8edbc0ea5e8ab63ba2400471e435d257c6770c99bbcf19fee48c5e5bcfde7809820d057adf5a82c323abe22a0ed1c53518e4567ac5b85d7aa5239b737c056c458af222811d6294d02ebd247f515bef881458f70d53516dd0f8fbab40df1672bba6f2c9f80d3a85b26439fe413da5802e43b40d705ffde10c976f0df1013f282bf0b9dec979c632b0360bf38bde80a022deff531b81650c1d1612344e018aa15591c922424db5c29ad974095873b4cb479d7fd99c5e64c"}, {0xe20, 0x0, 0x0, "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"}], 0x2008}, 0x0) 06:06:29 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004740)={0x6, 0x3, &(0x7f0000003180)=@framed, &(0x7f00000031c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000046c0), 0x8, 0x10, 0x0}, 0x80) 06:06:29 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1a}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ee8) 06:06:29 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x1c00}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) 06:06:29 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x6200}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:29 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:29 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f00) 06:06:29 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000001c0), 0x4) 06:06:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004740)={0x6, 0x3, &(0x7f0000003180)=@framed, &(0x7f00000031c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004700), 0x10}, 0x80) 06:06:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, 0x0, 0x0) 06:06:30 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f18) 06:06:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x63}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x1001) 06:06:30 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:30 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x64}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f30) 06:06:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x18, 0x0, 0x0, "85"}, {0x10}], 0x28}, 0xc08c0) 06:06:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:30 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004740)={0x6, 0x3, &(0x7f0000003180)=@framed, &(0x7f00000031c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000300), 0x12) 06:06:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 06:06:30 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@exit, @alu={0x4}, @map_val], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f48) 06:06:30 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x400080, 0x0) 06:06:30 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4}], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f60) 06:06:30 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) 06:06:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:31 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x14, 0x1, &(0x7f0000001480)=@raw=[@func], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000100)=""/181, 0x3e, 0xb5, 0x1}, 0x20) 06:06:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f78) 06:06:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 06:06:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 06:06:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x40c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 06:06:31 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:31 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001640), 0x10) 06:06:31 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) 06:06:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x333201, 0x0) 06:06:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x7, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x6) 06:06:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0xa, 0x1, &(0x7f0000001480)=@raw=[@func], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1}]}}, &(0x7f0000000100)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 06:06:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f90) 06:06:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:31 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) 06:06:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2}}, 0x20) 06:06:31 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000440)=@raw=[@kfunc], &(0x7f0000000480)='syzkaller\x00', 0x4, 0xb4, &(0x7f00000004c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3fa8) 06:06:31 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x7, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x145840, 0x0) 06:06:31 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001600), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 06:06:31 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:31 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3fc0) 06:06:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000100)=""/181, 0x36, 0xb5, 0x1}, 0x20) 06:06:32 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 06:06:32 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001940)="c2", 0x1}], 0x4}, 0x20040041) 06:06:32 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3fd8) 06:06:32 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002b00)={&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x20040041) 06:06:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="ca", 0x1}, {&(0x7f0000000100)='Z', 0x1}, {&(0x7f0000000140)="89", 0x1}], 0x3}, 0x44) 06:06:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 06:06:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x7, 0x1, &(0x7f0000001480)=@raw=[@func], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:06:32 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 06:06:32 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3ff0) 06:06:32 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x4040151) 06:06:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 06:06:32 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4008) 06:06:32 executing program 3: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)=@un=@file={0x0, './file0\x00'}, 0xa) 06:06:32 executing program 0: setitimer(0x0, &(0x7f0000000040)={{}, {0xfffffffffffffffd}}, 0x0) 06:06:32 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 06:06:32 executing program 0: poll(&(0x7f0000000080)=[{}], 0x1, 0x10000) execve(0x0, 0x0, 0x0) 06:06:32 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46}, './file0\x00'}) 06:06:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) 06:06:32 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4020) 06:06:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$lock(r0, 0xb, 0x0) 06:06:32 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46}, './file0\x00'}) 06:06:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4038) 06:06:33 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46}, './file0\x00'}) 06:06:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 06:06:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 06:06:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)=0x2a) 06:06:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4050) 06:06:33 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) 06:06:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x0) 06:06:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:33 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4068) 06:06:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, &(0x7f00000014c0)}) [ 776.572917][T18592] syz-executor.3[18592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.173336][T18788] binder: 18787:18788 ioctl c0306201 20001480 returned -14 06:06:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:33 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4080) 06:06:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 780.307751][ T7691] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 780.436525][T18795] binder: 18792:18795 ioctl c0306201 20001480 returned -14 06:06:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)={@flat=@weak_binder, @fda={0x73622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:34 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4098) 06:06:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, 0x0, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 780.485819][T18797] binder: 18796:18797 ioctl c0306201 20001480 returned -14 [ 780.512316][T18797] binder: 18796:18797 ioctl c0306201 20000440 returned -14 06:06:34 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x40b0) [ 780.657598][T18805] binder: BINDER_SET_CONTEXT_MGR already set [ 780.670177][T18805] binder: 18804:18805 ioctl 40046207 0 returned -16 [ 780.670751][T18805] binder: 18804:18805 ioctl c0306201 20001480 returned -14 06:06:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 780.693661][T18805] binder: 18804:18805 ioctl c0306201 20000440 returned -14 [ 780.722810][ T7691] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 780.722844][ T7691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.725103][ T7691] usb 4-1: config 0 descriptor?? [ 780.760330][ T7691] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 781.827912][ T7691] gspca_nw80x: reg_r err -71 [ 781.827970][ T7691] nw80x: probe of 4-1:0.0 failed with error -71 [ 781.832628][ T7691] usb 4-1: USB disconnect, device number 62 06:06:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, 0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:35 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x40c8) 06:06:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2208) 06:06:35 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1f98) 06:06:35 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 1) 06:06:36 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x40e0) 06:06:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 1) 06:06:36 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 2) [ 782.537017][T18833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.570688][T18837] binder: 18835:18837 ioctl c0306201 20001480 returned -14 06:06:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 2) 06:06:36 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x40f8) [ 782.580854][T18837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.580904][T18837] binder: 18835:18837 ioctl c0306201 20000440 returned -14 [ 782.681416][T18839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.707902][ T4125] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 782.731653][T18841] binder: 18840:18841 ioctl c0306201 20001480 returned -14 [ 782.733700][T18841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.733751][T18841] binder: 18840:18841 ioctl c0306201 20000440 returned -14 [ 783.098126][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 783.098169][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.111808][ T4125] usb 4-1: config 0 descriptor?? [ 783.154940][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 784.247848][ T4125] gspca_nw80x: reg_r err -71 [ 784.247905][ T4125] nw80x: probe of 4-1:0.0 failed with error -71 [ 784.252519][ T4125] usb 4-1: USB disconnect, device number 63 06:06:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 3) 06:06:38 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 3) 06:06:38 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4110) 06:06:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 06:06:38 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 4) [ 784.806385][T18848] FAULT_INJECTION: forcing a failure. [ 784.806385][T18848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.806420][T18848] CPU: 1 PID: 18848 Comm: syz-executor.5 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 06:06:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 06:06:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 4) [ 784.806447][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.806461][T18848] Call Trace: 06:06:38 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4128) [ 784.806468][T18848] [ 784.806487][T18848] dump_stack_lvl+0xcd/0x134 [ 784.806528][T18848] should_fail.cold+0x5/0xa 06:06:38 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 5) [ 784.806559][T18848] _copy_from_user+0x2a/0x170 06:06:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) [ 784.806609][T18848] _autofs_dev_ioctl+0x104/0x7f0 [ 784.806702][T18848] ? autofs_dev_ioctl_openmount+0x2d0/0x2d0 [ 784.806731][T18848] ? __fget_files+0x286/0x470 [ 784.806789][T18848] ? _autofs_dev_ioctl+0x7f0/0x7f0 [ 784.806819][T18848] autofs_dev_ioctl+0x17/0x20 [ 784.806848][T18848] __x64_sys_ioctl+0x193/0x200 [ 784.806886][T18848] do_syscall_64+0x35/0xb0 [ 784.806921][T18848] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 784.806950][T18848] RIP: 0033:0x7fa64fe890e9 [ 784.806970][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.806995][T18848] RSP: 002b:00007fa650f17168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.807019][T18848] RAX: ffffffffffffffda RBX: 00007fa64ff9bf60 RCX: 00007fa64fe890e9 [ 784.807036][T18848] RDX: 0000000020000240 RSI: 00000000c018937e RDI: 0000000000000003 [ 784.807051][T18848] RBP: 00007fa650f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.807066][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.807081][T18848] R13: 00007fff361a62af R14: 00007fa650f17300 R15: 0000000000022000 [ 784.807115][T18848] [ 784.850863][T18857] binder: 18852:18857 ioctl c0306201 20001480 returned -14 [ 784.855318][T18857] FAULT_INJECTION: forcing a failure. [ 784.855318][T18857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.855351][T18857] CPU: 0 PID: 18857 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 784.855376][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.855389][T18857] Call Trace: [ 784.855395][T18857] [ 784.855404][T18857] dump_stack_lvl+0xcd/0x134 [ 784.855440][T18857] should_fail.cold+0x5/0xa [ 784.855469][T18857] _copy_from_user+0x2a/0x170 [ 784.855514][T18857] binder_ioctl+0x560/0x6d80 [ 784.855664][T18857] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 784.855699][T18857] ? tomoyo_path_number_perm+0x24e/0x590 [ 784.855742][T18857] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 784.855779][T18857] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 784.855841][T18857] ? binder_thread_write+0x3220/0x3220 [ 784.855879][T18857] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 784.855913][T18857] ? do_vfs_ioctl+0x132/0x15c0 [ 784.855949][T18857] ? vfs_fileattr_set+0xbe0/0xbe0 [ 784.856004][T18857] ? __context_tracking_exit+0xb8/0xe0 [ 784.856039][T18857] ? __fget_files+0x286/0x470 [ 784.856081][T18857] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.856116][T18857] ? binder_thread_write+0x3220/0x3220 [ 784.856159][T18857] __x64_sys_ioctl+0x193/0x200 [ 784.856196][T18857] do_syscall_64+0x35/0xb0 [ 784.856227][T18857] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 784.856255][T18857] RIP: 0033:0x7f7994e890e9 [ 784.856274][T18857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.856299][T18857] RSP: 002b:00007f79960c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.856322][T18857] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e890e9 [ 784.856339][T18857] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 784.856354][T18857] RBP: 00007f79960c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.856370][T18857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.856384][T18857] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 784.856418][T18857] [ 784.867409][T18857] binder: 18852:18857 ioctl c0306201 20000440 returned -14 [ 785.012671][T18864] binder: 18861:18864 ioctl c0306201 20001480 returned -14 [ 785.016579][T18862] FAULT_INJECTION: forcing a failure. [ 785.016579][T18862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.016610][T18862] CPU: 0 PID: 18862 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 785.016636][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.016650][T18862] Call Trace: [ 785.016657][T18862] [ 785.016665][T18862] dump_stack_lvl+0xcd/0x134 [ 785.016701][T18862] should_fail.cold+0x5/0xa [ 785.016729][T18862] _copy_from_user+0x2a/0x170 [ 785.016771][T18862] memdup_user+0x65/0xd0 [ 785.016884][T18862] strndup_user+0x70/0xe0 [ 785.016916][T18862] __x64_sys_mount+0x134/0x300 [ 785.016947][T18862] ? copy_mnt_ns+0xae0/0xae0 [ 785.016981][T18862] ? syscall_enter_from_user_mode+0x21/0x70 [ 785.017033][T18862] do_syscall_64+0x35/0xb0 [ 785.017066][T18862] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 785.017095][T18862] RIP: 0033:0x7fc617e890e9 [ 785.017114][T18862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.017138][T18862] RSP: 002b:00007fc618f0d168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 785.017162][T18862] RAX: ffffffffffffffda RBX: 00007fc617f9bf60 RCX: 00007fc617e890e9 [ 785.017178][T18862] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 785.017194][T18862] RBP: 00007fc618f0d1d0 R08: 0000000020000480 R09: 0000000000000000 [ 785.017209][T18862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.017224][T18862] R13: 00007ffeee22645f R14: 00007fc618f0d300 R15: 0000000000022000 [ 785.017257][T18862] [ 785.030559][T18864] FAULT_INJECTION: forcing a failure. [ 785.030559][T18864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.030593][T18864] CPU: 0 PID: 18864 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 785.030620][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.030635][T18864] Call Trace: [ 785.030642][T18864] [ 785.030651][T18864] dump_stack_lvl+0xcd/0x134 [ 785.030691][T18864] should_fail.cold+0x5/0xa [ 785.030723][T18864] _copy_from_user+0x2a/0x170 [ 785.030768][T18864] binder_thread_write+0x858/0x3220 [ 785.030827][T18864] ? binder_transaction+0x9ae0/0x9ae0 [ 785.030862][T18864] ? find_held_lock+0x2d/0x110 [ 785.030901][T18864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 785.030935][T18864] ? binder_debug+0xb2/0x160 [ 785.030963][T18864] ? __traceiter_binder_return+0xa0/0xa0 [ 785.031001][T18864] ? lock_downgrade+0x6e0/0x6e0 [ 785.031061][T18864] binder_ioctl+0x34a0/0x6d80 [ 785.031107][T18864] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 785.031140][T18864] ? tomoyo_path_number_perm+0x24e/0x590 [ 785.031181][T18864] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 785.031219][T18864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 785.031267][T18864] ? binder_thread_write+0x3220/0x3220 [ 785.031305][T18864] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 785.031338][T18864] ? do_vfs_ioctl+0x132/0x15c0 [ 785.031374][T18864] ? vfs_fileattr_set+0xbe0/0xbe0 [ 785.031435][T18864] ? __fget_files+0x286/0x470 [ 785.031473][T18864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 785.031504][T18864] ? binder_thread_write+0x3220/0x3220 [ 785.031544][T18864] __x64_sys_ioctl+0x193/0x200 [ 785.031580][T18864] do_syscall_64+0x35/0xb0 [ 785.031614][T18864] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 785.031643][T18864] RIP: 0033:0x7f7994e890e9 [ 785.031663][T18864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.031689][T18864] RSP: 002b:00007f79960c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.031715][T18864] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e890e9 [ 785.031732][T18864] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 785.031747][T18864] RBP: 00007f79960c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.031762][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.031777][T18864] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 785.031812][T18864] [ 785.037176][T18864] binder: 18861:18864 ioctl c0306201 20000440 returned -14 [ 785.166855][T18870] FAULT_INJECTION: forcing a failure. [ 785.166855][T18870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.166891][T18870] CPU: 1 PID: 18870 Comm: syz-executor.5 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 785.166918][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.166934][T18870] Call Trace: [ 785.166940][T18870] [ 785.166949][T18870] dump_stack_lvl+0xcd/0x134 [ 785.166986][T18870] should_fail.cold+0x5/0xa [ 785.167015][T18870] _copy_from_user+0x2a/0x170 [ 785.167061][T18870] memdup_user+0x65/0xd0 [ 785.167092][T18870] _autofs_dev_ioctl+0x1fd/0x7f0 [ 785.167123][T18870] ? autofs_dev_ioctl_openmount+0x2d0/0x2d0 [ 785.167161][T18870] ? _autofs_dev_ioctl+0x7f0/0x7f0 [ 785.167189][T18870] autofs_dev_ioctl+0x17/0x20 [ 785.167216][T18870] __x64_sys_ioctl+0x193/0x200 [ 785.167254][T18870] do_syscall_64+0x35/0xb0 [ 785.167288][T18870] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 785.167318][T18870] RIP: 0033:0x7fa64fe890e9 [ 785.167338][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.167361][T18870] RSP: 002b:00007fa650f17168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.167385][T18870] RAX: ffffffffffffffda RBX: 00007fa64ff9bf60 RCX: 00007fa64fe890e9 [ 785.167402][T18870] RDX: 0000000020000240 RSI: 00000000c018937e RDI: 0000000000000003 [ 785.167417][T18870] RBP: 00007fa650f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.167432][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.167446][T18870] R13: 00007fff361a62af R14: 00007fa650f17300 R15: 0000000000022000 [ 785.167488][T18870] [ 785.170794][ T145] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 785.558016][ T145] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 785.558050][ T145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.560110][ T145] usb 4-1: config 0 descriptor?? [ 785.619962][ T145] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 786.700157][ T145] gspca_nw80x: reg_r err -71 [ 786.700212][ T145] nw80x: probe of 4-1:0.0 failed with error -71 [ 786.706095][ T145] usb 4-1: USB disconnect, device number 64 06:06:40 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4140) 06:06:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 5) 06:06:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:06:40 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 6) 06:06:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 06:06:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:40 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (fail_nth: 7) [ 787.251192][T18883] FAULT_INJECTION: forcing a failure. [ 787.251192][T18883] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:06:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) (fail_nth: 6) [ 787.251225][T18883] CPU: 0 PID: 18883 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 787.251253][T18883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:06:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 06:06:41 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 787.251267][T18883] Call Trace: [ 787.251274][T18883] [ 787.251281][T18883] dump_stack_lvl+0xcd/0x134 06:06:41 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4158) [ 787.251320][T18883] should_fail.cold+0x5/0xa [ 787.251351][T18883] _copy_from_user+0x2a/0x170 06:06:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 787.251396][T18883] copy_mount_options+0x76/0x180 [ 787.251440][T18883] __x64_sys_mount+0x1a9/0x300 [ 787.251469][T18883] ? copy_mnt_ns+0xae0/0xae0 [ 787.251498][T18883] ? syscall_enter_from_user_mode+0x21/0x70 06:06:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) [ 787.251549][T18883] do_syscall_64+0x35/0xb0 06:06:41 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x2, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 787.251582][T18883] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 787.251613][T18883] RIP: 0033:0x7fc617e890e9 [ 787.251632][T18883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.251656][T18883] RSP: 002b:00007fc618f0d168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 787.251680][T18883] RAX: ffffffffffffffda RBX: 00007fc617f9bf60 RCX: 00007fc617e890e9 [ 787.251697][T18883] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 787.251713][T18883] RBP: 00007fc618f0d1d0 R08: 0000000020000480 R09: 0000000000000000 [ 787.251730][T18883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.251745][T18883] R13: 00007ffeee22645f R14: 00007fc618f0d300 R15: 0000000000022000 [ 787.251787][T18883] [ 787.281879][T18877] binder: 18876:18877 ioctl c0306201 20001480 returned -14 [ 787.288840][T18877] FAULT_INJECTION: forcing a failure. [ 787.288840][T18877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.288872][T18877] CPU: 1 PID: 18877 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 787.288899][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.288914][T18877] Call Trace: [ 787.288921][T18877] [ 787.288930][T18877] dump_stack_lvl+0xcd/0x134 [ 787.288968][T18877] should_fail.cold+0x5/0xa [ 787.289000][T18877] _copy_to_user+0x2a/0x140 [ 787.289045][T18877] binder_ioctl+0x51c3/0x6d80 [ 787.289103][T18877] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 787.289143][T18877] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 787.289196][T18877] ? binder_thread_write+0x3220/0x3220 [ 787.289236][T18877] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 787.289277][T18877] ? do_vfs_ioctl+0x132/0x15c0 [ 787.289315][T18877] ? vfs_fileattr_set+0xbe0/0xbe0 [ 787.289362][T18877] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 787.289425][T18877] ? __fget_files+0x286/0x470 [ 787.289470][T18877] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.289505][T18877] ? binder_thread_write+0x3220/0x3220 [ 787.289548][T18877] __x64_sys_ioctl+0x193/0x200 [ 787.289586][T18877] do_syscall_64+0x35/0xb0 [ 787.289621][T18877] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 787.289650][T18877] RIP: 0033:0x7f7994e890e9 [ 787.289670][T18877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.289694][T18877] RSP: 002b:00007f79960c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.289718][T18877] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e890e9 [ 787.289736][T18877] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 787.289752][T18877] RBP: 00007f79960c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.289769][T18877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.289785][T18877] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 787.289821][T18877] [ 787.301884][T18877] binder: 18876:18877 ioctl c0306201 20000440 returned -14 [ 787.394525][T18889] FAULT_INJECTION: forcing a failure. [ 787.394525][T18889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.394560][T18889] CPU: 1 PID: 18889 Comm: syz-executor.5 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 787.394589][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.394604][T18889] Call Trace: [ 787.394610][T18889] [ 787.394620][T18889] dump_stack_lvl+0xcd/0x134 [ 787.394662][T18889] should_fail.cold+0x5/0xa [ 787.394695][T18889] _copy_to_user+0x2a/0x140 [ 787.394741][T18889] simple_read_from_buffer+0xcc/0x160 [ 787.394852][T18889] proc_fail_nth_read+0x187/0x220 [ 787.394925][T18889] ? proc_exe_link+0x1d0/0x1d0 [ 787.394964][T18889] ? security_file_permission+0xab/0xd0 [ 787.395009][T18889] ? proc_exe_link+0x1d0/0x1d0 [ 787.395048][T18889] vfs_read+0x1ef/0x5d0 [ 787.395089][T18889] ksys_read+0x127/0x250 [ 787.395124][T18889] ? vfs_write+0xac0/0xac0 [ 787.395162][T18889] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.395215][T18889] do_syscall_64+0x35/0xb0 [ 787.395255][T18889] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 787.395287][T18889] RIP: 0033:0x7fa64fe3bc9c [ 787.395308][T18889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 787.395333][T18889] RSP: 002b:00007fa650f17160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.395358][T18889] RAX: ffffffffffffffda RBX: 00007fa64ff9bf60 RCX: 00007fa64fe3bc9c [ 787.395376][T18889] RDX: 000000000000000f RSI: 00007fa650f171e0 RDI: 0000000000000004 [ 787.395391][T18889] RBP: 00007fa650f171d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.395407][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.395423][T18889] R13: 00007fff361a62af R14: 00007fa650f17300 R15: 0000000000022000 [ 787.395462][T18889] [ 787.492930][T18892] binder: 18890:18892 ioctl c0306201 20001480 returned -14 [ 787.510648][T18892] binder: 18890:18892 ioctl c0306201 20000440 returned -14 [ 787.510690][T18892] FAULT_INJECTION: forcing a failure. [ 787.510690][T18892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.510719][T18892] CPU: 0 PID: 18892 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 787.510747][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.510761][T18892] Call Trace: [ 787.510768][T18892] [ 787.510776][T18892] dump_stack_lvl+0xcd/0x134 [ 787.510816][T18892] should_fail.cold+0x5/0xa [ 787.510847][T18892] _copy_to_user+0x2a/0x140 [ 787.510889][T18892] simple_read_from_buffer+0xcc/0x160 [ 787.510931][T18892] proc_fail_nth_read+0x187/0x220 [ 787.510973][T18892] ? proc_exe_link+0x1d0/0x1d0 [ 787.511010][T18892] ? security_file_permission+0xab/0xd0 [ 787.511056][T18892] ? proc_exe_link+0x1d0/0x1d0 [ 787.511094][T18892] vfs_read+0x1ef/0x5d0 [ 787.511136][T18892] ksys_read+0x127/0x250 [ 787.511172][T18892] ? vfs_write+0xac0/0xac0 [ 787.511211][T18892] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.511261][T18892] do_syscall_64+0x35/0xb0 [ 787.511294][T18892] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 787.511320][T18892] RIP: 0033:0x7f7994e3bc9c [ 787.511340][T18892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 787.511375][T18892] RSP: 002b:00007f79960c2160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.511401][T18892] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e3bc9c [ 787.511418][T18892] RDX: 000000000000000f RSI: 00007f79960c21e0 RDI: 000000000000000e [ 787.511434][T18892] RBP: 00007f79960c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.511449][T18892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.511462][T18892] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 787.511496][T18892] [ 787.597869][ T145] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 787.662966][T18900] binder: 18899:18900 ioctl c0306201 20001480 returned -14 [ 787.718810][T18900] binder: 18899:18900 ioctl c0306201 20000440 returned -14 [ 787.770019][T18903] FAULT_INJECTION: forcing a failure. [ 787.770019][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.770053][T18903] CPU: 1 PID: 18903 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 787.770081][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.770097][T18903] Call Trace: [ 787.770103][T18903] [ 787.770112][T18903] dump_stack_lvl+0xcd/0x134 [ 787.770150][T18903] should_fail.cold+0x5/0xa [ 787.770179][T18903] strncpy_from_user+0x34/0x3c0 [ 787.770282][T18903] getname_flags.part.0+0x95/0x4f0 [ 787.770318][T18903] getname_flags+0x9a/0xe0 [ 787.770346][T18903] user_path_at_empty+0x2b/0x60 [ 787.770376][T18903] __x64_sys_mount+0x1ea/0x300 [ 787.770405][T18903] ? copy_mnt_ns+0xae0/0xae0 [ 787.770434][T18903] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.770480][T18903] do_syscall_64+0x35/0xb0 [ 787.770508][T18903] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 787.770536][T18903] RIP: 0033:0x7fc617e890e9 [ 787.770556][T18903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.770579][T18903] RSP: 002b:00007fc618f0d168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 787.770607][T18903] RAX: ffffffffffffffda RBX: 00007fc617f9bf60 RCX: 00007fc617e890e9 [ 787.770624][T18903] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 787.770640][T18903] RBP: 00007fc618f0d1d0 R08: 0000000020000480 R09: 0000000000000000 [ 787.770653][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.770676][T18903] R13: 00007ffeee22645f R14: 00007fc618f0d300 R15: 0000000000022000 [ 787.770711][T18903] [ 788.019671][ T145] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 788.019707][ T145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.021473][ T145] usb 4-1: config 0 descriptor?? [ 788.069960][ T145] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 788.937849][ T145] gspca_nw80x: reg_r err -71 [ 788.937883][ T145] nw80x: probe of 4-1:0.0 failed with error -71 [ 788.943995][ T145] usb 4-1: USB disconnect, device number 65 06:06:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:06:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4170) 06:06:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 06:06:43 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x10, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4188) 06:06:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) [ 789.504806][T18914] binder: 18909:18914 ioctl c0306201 20001480 returned -14 06:06:43 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x541b, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x41a0) 06:06:43 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5421, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 789.678640][T18923] binder: 18921:18923 ioctl c0306201 20001480 returned -14 [ 789.680229][T18923] binder: 18921:18923 ioctl 10 20000440 returned -22 [ 789.752590][T18926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.817817][ T6298] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 790.177855][ T6298] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 790.177893][ T6298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.179861][ T6298] usb 4-1: config 0 descriptor?? [ 790.220468][ T6298] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 791.097941][ T6298] gspca_nw80x: reg_r err -71 [ 791.097990][ T6298] nw80x: probe of 4-1:0.0 failed with error -71 [ 791.102259][ T6298] usb 4-1: USB disconnect, device number 66 06:06:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:06:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:45 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x41b8) 06:06:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 06:06:45 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5450, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) [ 791.638671][T18938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.642479][T18934] binder: 18933:18934 ioctl c0306201 20001480 returned -14 06:06:45 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5451, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:45 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x41d0) [ 791.657299][T18934] binder: 18933:18934 ioctl 541b 20000440 returned -22 06:06:45 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5452, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 791.823042][T18950] binder: 18948:18950 ioctl c0306201 20001480 returned -14 [ 791.957926][T18956] binder: 18954:18956 ioctl c0306201 20001480 returned -14 [ 791.987896][ T3686] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 792.387896][ T3686] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 792.387932][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.389841][ T3686] usb 4-1: config 0 descriptor?? [ 792.447992][ T3686] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 793.318005][ T3686] gspca_nw80x: reg_r err -71 [ 793.318060][ T3686] nw80x: probe of 4-1:0.0 failed with error -71 [ 793.324095][ T3686] usb 4-1: USB disconnect, device number 67 06:06:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:47 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x41e8) 06:06:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 06:06:47 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x5460, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 06:06:47 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x8933, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:47 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4200) [ 793.909101][T18966] binder: 18962:18966 ioctl c0306201 20001480 returned -14 06:06:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 06:06:47 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x400448c9, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 794.072044][T18980] binder: 18976:18980 ioctl c0306201 20001480 returned -14 [ 794.217786][ T3686] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 794.618021][ T3686] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 794.618056][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.621263][ T3686] usb 4-1: config 0 descriptor?? [ 794.680142][ T3686] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 795.537891][ T3686] gspca_nw80x: reg_r err -71 [ 795.537954][ T3686] nw80x: probe of 4-1:0.0 failed with error -71 [ 795.541190][ T3686] usb 4-1: USB disconnect, device number 68 06:06:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4218) 06:06:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 06:06:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:49 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x400448dd, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4230) 06:06:49 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x400454ca, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) [ 796.083345][T18992] binder: 18988:18992 ioctl c0306201 20001480 returned -14 06:06:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x8933, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:49 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4248) 06:06:49 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x40049409, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 796.284748][T19005] binder: 19003:19005 ioctl c0306201 20001480 returned -14 [ 796.301042][T19005] binder: 19003:19005 ioctl 8933 20000440 returned -22 [ 796.387920][ T4125] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 796.747886][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 796.747910][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.749220][ T4125] usb 4-1: config 0 descriptor?? [ 796.789130][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 797.667842][ T4125] gspca_nw80x: reg_r err -71 [ 797.667906][ T4125] nw80x: probe of 4-1:0.0 failed with error -71 [ 797.669712][ T4125] usb 4-1: USB disconnect, device number 69 06:06:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x400448c9, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 06:06:51 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x40086602, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:51 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4260) 06:06:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:51 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:51 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4278) 06:06:51 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x40186366, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x400448dd, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 798.214451][T19017] binder: 19014:19017 ioctl c0306201 20001480 returned -14 [ 798.220308][T19017] binder: 19014:19017 ioctl 400448c9 20000440 returned -22 06:06:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 06:06:51 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4290) 06:06:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) [ 798.359021][T19029] binder: 19025:19029 ioctl c0306201 20001480 returned -14 [ 798.367578][T19029] binder: 19025:19029 ioctl 400448dd 20000440 returned -22 06:06:51 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x401c5820, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x400454ca, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:52 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x42a8) [ 798.446827][ T4386] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 06:06:52 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x4020940d, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 798.537794][ T6298] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 798.569916][T19039] binder: 19038:19039 ioctl c0306201 20001480 returned -14 [ 798.573424][T19039] binder: 19038:19039 ioctl 400454ca 20000440 returned -22 [ 798.897916][ T6298] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 798.897952][ T6298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.899299][ T6298] usb 4-1: config 0 descriptor?? [ 798.940905][ T6298] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 799.787960][ T6298] gspca_nw80x: reg_r err -71 [ 799.788056][ T6298] nw80x: probe of 4-1:0.0 failed with error -71 [ 799.793819][ T6298] usb 4-1: USB disconnect, device number 70 06:06:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 06:06:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x42c0) 06:06:53 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:06:53 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x80086301, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x42d8) 06:06:53 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x80086601, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 06:06:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 800.342969][T19051] binder: 19045:19051 ioctl c0306201 20001480 returned -14 [ 800.359859][T19054] 9pnet_fd: Insufficient options for proto=fd 06:06:54 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x42f0) 06:06:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) [ 800.457465][T19061] 9pnet_fd: Insufficient options for proto=fd [ 800.484551][T19063] binder: 19062:19063 ioctl c0306201 20001480 returned -14 [ 800.496976][T19063] binder: BINDER_SET_CONTEXT_MGR already set [ 800.496990][T19063] binder: 19062:19063 ioctl 40046207 20000440 returned -16 [ 800.586337][T19069] 9pnet_fd: Insufficient options for proto=fd [ 800.688340][ T145] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 801.068053][ T145] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 801.068081][ T145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.069885][ T145] usb 4-1: config 0 descriptor?? [ 801.110149][ T145] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 801.547969][ T145] gspca_nw80x: reg_r err -32 [ 801.548026][ T145] nw80x: probe of 4-1:0.0 failed with error -32 06:06:56 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x801c581f, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:06:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:56 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4308) 06:06:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 06:06:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 803.391429][ T4124] usb 4-1: USB disconnect, device number 71 06:06:57 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0045878, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 06:06:57 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4320) [ 803.465780][T19080] binder: 19072:19080 ioctl c0306201 20001480 returned -14 06:06:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:06:57 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0045878, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:06:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 06:06:57 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4338) [ 803.621795][T19091] binder: 19086:19091 ioctl c0306201 20001480 returned -14 [ 803.897960][ T4124] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 804.257915][ T4124] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 804.257951][ T4124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.259872][ T4124] usb 4-1: config 0 descriptor?? [ 804.310071][ T4124] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 804.738052][ T4124] gspca_nw80x: reg_r err -32 [ 804.738110][ T4124] nw80x: probe of 4-1:0.0 failed with error -32 06:07:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 06:07:00 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:00 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4350) 06:07:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 806.482614][ T6298] usb 4-1: USB disconnect, device number 72 06:07:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 06:07:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:00 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189436, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:00 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4368) [ 806.550552][T19108] binder: 19100:19108 ioctl c0306201 20001480 returned -14 06:07:00 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc020660b, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 806.672565][T19117] binder: 19113:19117 ioctl c0306201 20001480 returned -14 [ 806.688755][T19117] binder: 19113:19117 ioctl 40086602 20000440 returned -22 [ 806.795101][T19123] binder: 19121:19123 ioctl c0306201 20001480 returned -14 [ 806.810774][T19123] binder: 19121:19123 ioctl 400c620e 20000440 returned -22 [ 806.987787][ T6298] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 807.347990][ T6298] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 807.348027][ T6298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.349946][ T6298] usb 4-1: config 0 descriptor?? [ 807.390069][ T6298] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 807.827922][ T6298] gspca_nw80x: reg_r err -32 [ 807.827979][ T6298] nw80x: probe of 4-1:0.0 failed with error -32 [ 808.369329][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 06:07:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 06:07:03 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4380) 06:07:03 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x2, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x0, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 809.568223][ T6298] usb 4-1: USB disconnect, device number 73 06:07:03 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x3, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 809.611577][T19133] autofs4:pid:19133:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc018937e) 06:07:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 06:07:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x40186366, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:03 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4398) [ 809.611614][T19133] autofs4:pid:19133:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 809.637174][T19128] binder: 19126:19128 ioctl c0306201 20001480 returned -14 [ 809.658295][T19128] binder: BINDER_SET_CONTEXT_MGR already set 06:07:03 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x5, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) [ 809.658309][T19128] binder: 19126:19128 ioctl 4018620d 20000440 returned -16 [ 809.725428][T19139] autofs4:pid:19139:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.1), cmd(0xc018937e) [ 809.725460][T19139] autofs4:pid:19139:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 809.818742][T19145] binder: BINDER_SET_CONTEXT_MGR already set [ 809.818756][T19145] binder: 19143:19145 ioctl 40046207 0 returned -16 [ 809.819097][T19145] binder: 19143:19145 ioctl c0306201 20001480 returned -14 [ 809.826908][T19145] binder: 19143:19145 ioctl 40186366 20000440 returned -22 [ 809.879984][T19148] FAULT_INJECTION: forcing a failure. [ 809.879984][T19148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.880017][T19148] CPU: 1 PID: 19148 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 809.880045][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.880061][T19148] Call Trace: [ 809.880068][T19148] [ 809.880077][T19148] dump_stack_lvl+0xcd/0x134 [ 809.880117][T19148] should_fail.cold+0x5/0xa [ 809.880149][T19148] _copy_to_user+0x2a/0x140 [ 809.880193][T19148] simple_read_from_buffer+0xcc/0x160 [ 809.880238][T19148] proc_fail_nth_read+0x187/0x220 [ 809.880280][T19148] ? proc_exe_link+0x1d0/0x1d0 [ 809.880319][T19148] ? security_file_permission+0xab/0xd0 [ 809.880364][T19148] ? proc_exe_link+0x1d0/0x1d0 [ 809.880403][T19148] vfs_read+0x1ef/0x5d0 [ 809.880447][T19148] ksys_read+0x127/0x250 [ 809.880484][T19148] ? vfs_write+0xac0/0xac0 [ 809.880527][T19148] ? syscall_enter_from_user_mode+0x21/0x70 [ 809.880582][T19148] do_syscall_64+0x35/0xb0 [ 809.880613][T19148] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 809.880647][T19148] RIP: 0033:0x7fc617e3bc9c [ 809.880667][T19148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 809.880694][T19148] RSP: 002b:00007fc618f0d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.880717][T19148] RAX: ffffffffffffffda RBX: 00007fc617f9bf60 RCX: 00007fc617e3bc9c [ 809.880733][T19148] RDX: 000000000000000f RSI: 00007fc618f0d1e0 RDI: 0000000000000006 [ 809.880748][T19148] RBP: 00007fc618f0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.880763][T19148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.880776][T19148] R13: 00007ffeee22645f R14: 00007fc618f0d300 R15: 0000000000022000 [ 809.880814][T19148] [ 809.918279][T19150] autofs4:pid:19150:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(5.1), cmd(0xc018937e) [ 809.918315][T19150] autofs4:pid:19150:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 810.068327][ T6298] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 810.447917][ T6298] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 810.447983][ T6298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.450778][ T6298] usb 4-1: config 0 descriptor?? [ 810.489170][ T6298] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 810.928219][ T6298] gspca_nw80x: reg_r err -32 [ 810.928278][ T6298] nw80x: probe of 4-1:0.0 failed with error -32 06:07:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:06 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x43b0) 06:07:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:06 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x7, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:06 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x0, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 812.668344][T10689] usb 4-1: USB disconnect, device number 74 06:07:06 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0xb, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 812.720523][T19158] autofs4:pid:19158:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(7.1), cmd(0xc018937e) 06:07:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:06 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x43c8) [ 812.720556][T19158] autofs4:pid:19158:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 06:07:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x80086301, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 812.733336][T19159] binder: 19156:19159 ioctl c0306201 20001480 returned -14 [ 812.734828][T19159] binder: 19156:19159 ioctl 401c5820 20000440 returned -22 06:07:06 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x300, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 812.857172][T19165] binder: 19164:19165 ioctl c0306201 20001480 returned -14 [ 812.890354][T19168] autofs4:pid:19168:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(11.1), cmd(0xc018937e) [ 812.890388][T19168] autofs4:pid:19168:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 812.974749][T19174] binder: 19173:19174 ioctl c0306201 20001480 returned -14 [ 812.991061][T19174] binder: 19173:19174 ioctl 80086301 20000440 returned -22 [ 812.991297][T19176] autofs4:pid:19176:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc018937e) [ 812.991328][T19176] autofs4:pid:19176:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 813.127971][T10689] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 813.488423][T10689] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 813.488458][T10689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.490362][T10689] usb 4-1: config 0 descriptor?? [ 813.530039][T10689] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 813.967882][T10689] gspca_nw80x: reg_r err -32 [ 813.967941][T10689] nw80x: probe of 4-1:0.0 failed with error -32 06:07:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x40, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:09 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0xff00, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:09 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x43e0) 06:07:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x0, 0x1, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 815.762317][ T4125] usb 4-1: USB disconnect, device number 75 06:07:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 815.818826][T19184] binder: 19182:19184 ioctl c0306201 20001480 returned -14 [ 815.820208][T19184] binder: 19182:19184 ioctl 80086601 20000440 returned -22 06:07:09 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x43f8) 06:07:09 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0xffffff1f, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0x801c581f, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 815.852516][T19188] autofs4:pid:19188:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65280.1), cmd(0xc018937e) [ 815.852553][T19188] autofs4:pid:19188:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 815.951166][T19193] autofs4:pid:19193:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) 06:07:09 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x2, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 815.951200][T19193] autofs4:pid:19193:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 815.988552][T19198] binder: 19196:19198 ioctl c0306201 20001480 returned -14 [ 815.993862][T19198] binder: 19196:19198 ioctl 801c581f 20000440 returned -22 [ 816.110281][T19202] autofs4:pid:19202:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc018937e) [ 816.110316][T19202] autofs4:pid:19202:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 816.138808][T19204] binder: 19203:19204 ioctl c0306201 20001480 returned -14 [ 816.247812][ T4125] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 816.608429][ T4125] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 816.608466][ T4125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.611273][ T4125] usb 4-1: config 0 descriptor?? [ 816.650030][ T4125] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 817.078038][ T4125] gspca_nw80x: reg_r err -32 [ 817.078094][ T4125] nw80x: probe of 4-1:0.0 failed with error -32 06:07:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x0, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4410) 06:07:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x3, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:12 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) [ 818.818298][ T4124] usb 4-1: USB disconnect, device number 76 06:07:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x5, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 818.869445][T19212] binder: 19207:19212 ioctl c0306201 20001480 returned -14 [ 818.886849][T19215] autofs4:pid:19215:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc018937e) [ 818.886881][T19215] autofs4:pid:19215:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 06:07:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc00c620f, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4428) 06:07:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x7, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 818.983857][T19223] binder: 19222:19223 ioctl c0306201 20001480 returned -14 [ 819.022139][T19225] autofs4:pid:19225:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.5), cmd(0xc018937e) [ 819.022174][T19225] autofs4:pid:19225:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 06:07:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc00c6211, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 819.132217][T19228] binder: BINDER_SET_CONTEXT_MGR already set [ 819.132230][T19228] binder: 19227:19228 ioctl 40046207 0 returned -16 [ 819.132531][T19228] binder: 19227:19228 ioctl c0306201 20001480 returned -14 [ 819.133813][T19228] binder: 19227:19228 ioctl c00c620f 20000440 returned -22 [ 819.147152][T19232] autofs4:pid:19232:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.7), cmd(0xc018937e) [ 819.147187][T19232] autofs4:pid:19232:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 819.262691][T19235] binder: 19234:19235 ioctl c0306201 20001480 returned -14 [ 819.269058][T19235] BUG: sleeping function called from invalid context at lib/usercopy.c:28 06:07:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x0, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0xb, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:12 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4440) [ 819.269074][T19235] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 19235, name: syz-executor.4 [ 819.269092][T19235] preempt_count: 1, expected: 0 [ 819.269101][T19235] RCU nest depth: 0, expected: 0 [ 819.269111][T19235] 1 lock held by syz-executor.4/19235: 06:07:13 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x9, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x300, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:13 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4458) [ 819.269124][T19235] #0: ffff888074162af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 [ 819.269194][T19235] Preemption disabled at: [ 819.269199][T19235] [<0000000000000000>] 0x0 [ 819.269219][T19235] CPU: 0 PID: 19235 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0xff00, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 819.269243][T19235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:07:13 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4470) [ 819.269268][T19235] Call Trace: [ 819.269274][T19235] [ 819.269283][T19235] dump_stack_lvl+0xcd/0x134 06:07:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x0, 0x10000, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x300, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0xffffff1f, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 819.269320][T19235] __might_resched.cold+0x222/0x26b [ 819.269410][T19235] __might_fault+0x6c/0x170 [ 819.269490][T19235] _copy_to_user+0x25/0x140 [ 819.269533][T19235] binder_ioctl+0x7aa/0x6d80 [ 819.269581][T19235] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 819.269617][T19235] ? tomoyo_path_number_perm+0x24e/0x590 [ 819.269658][T19235] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 819.269700][T19235] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 819.269750][T19235] ? binder_thread_write+0x3220/0x3220 [ 819.269787][T19235] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 819.269821][T19235] ? do_vfs_ioctl+0x132/0x15c0 [ 819.269857][T19235] ? vfs_fileattr_set+0xbe0/0xbe0 [ 819.269912][T19235] ? __context_tracking_exit+0xb8/0xe0 [ 819.269947][T19235] ? __fget_files+0x286/0x470 [ 819.269990][T19235] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 819.270024][T19235] ? binder_thread_write+0x3220/0x3220 [ 819.270067][T19235] __x64_sys_ioctl+0x193/0x200 [ 819.270105][T19235] do_syscall_64+0x35/0xb0 [ 819.270139][T19235] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 819.270169][T19235] RIP: 0033:0x7f7994e890e9 [ 819.270189][T19235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.270213][T19235] RSP: 002b:00007f79960c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.270237][T19235] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e890e9 [ 819.270263][T19235] RDX: 0000000020000440 RSI: 00000000c00c6211 RDI: 0000000000000004 [ 819.270280][T19235] RBP: 00007f7994ee308d R08: 0000000000000000 R09: 0000000000000000 [ 819.270296][T19235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.270312][T19235] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 819.270351][T19235] [ 819.270419][T19235] [ 819.270424][T19235] ============================= [ 819.270431][T19235] [ BUG: Invalid wait context ] [ 819.270438][T19235] 5.18.0-rc6-next-20220516-syzkaller #0 Tainted: G W [ 819.270454][T19235] ----------------------------- [ 819.270460][T19235] syz-executor.4/19235 is trying to lock: [ 819.270472][T19235] ffff88807d61d858 (&mm->mmap_lock#2){++++}-{3:3}, at: __might_fault+0xa1/0x170 [ 819.270538][T19235] other info that might help us debug this: [ 819.270546][T19235] context-{4:4} [ 819.270555][T19235] 1 lock held by syz-executor.4/19235: [ 819.270569][T19235] #0: ffff888074162af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 [ 819.270640][T19235] stack backtrace: [ 819.270647][T19235] CPU: 0 PID: 19235 Comm: syz-executor.4 Tainted: G W 5.18.0-rc6-next-20220516-syzkaller #0 [ 819.270675][T19235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.270690][T19235] Call Trace: [ 819.270697][T19235] [ 819.270705][T19235] dump_stack_lvl+0xcd/0x134 [ 819.270737][T19235] __lock_acquire.cold+0xdb/0x3b4 [ 819.270796][T19235] ? lock_chain_count+0x20/0x20 [ 819.270836][T19235] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 819.270885][T19235] lock_acquire+0x1ab/0x570 [ 819.270924][T19235] ? __might_fault+0xa1/0x170 [ 819.270956][T19235] ? lock_release+0x780/0x780 06:07:13 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:13 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4488) 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x17, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x500, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x0, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 819.270994][T19235] ? dump_stack_lvl+0x120/0x134 [ 819.271025][T19235] ? dump_stack_lvl+0x12a/0x134 [ 819.271055][T19235] ? dump_stack_lvl+0x12c/0x134 [ 819.271089][T19235] __might_fault+0x104/0x170 [ 819.271118][T19235] ? __might_fault+0xa1/0x170 [ 819.271148][T19235] _copy_to_user+0x25/0x140 [ 819.271189][T19235] binder_ioctl+0x7aa/0x6d80 [ 819.271231][T19235] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:13 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x44a0) 06:07:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x600, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 819.271271][T19235] ? tomoyo_path_number_perm+0x24e/0x590 [ 819.271312][T19235] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 819.271352][T19235] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 819.271398][T19235] ? binder_thread_write+0x3220/0x3220 06:07:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 819.271436][T19235] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 819.271467][T19235] ? do_vfs_ioctl+0x132/0x15c0 [ 819.271497][T19235] ? vfs_fileattr_set+0xbe0/0xbe0 06:07:13 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 819.271533][T19235] ? __context_tracking_exit+0xb8/0xe0 [ 819.271561][T19235] ? __fget_files+0x286/0x470 [ 819.271600][T19235] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 819.271636][T19235] ? binder_thread_write+0x3220/0x3220 [ 819.271676][T19235] __x64_sys_ioctl+0x193/0x200 [ 819.271710][T19235] do_syscall_64+0x35/0xb0 [ 819.271742][T19235] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 819.271770][T19235] RIP: 0033:0x7f7994e890e9 [ 819.271786][T19235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.271809][T19235] RSP: 002b:00007f79960c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.271832][T19235] RAX: ffffffffffffffda RBX: 00007f7994f9bf60 RCX: 00007f7994e890e9 [ 819.271849][T19235] RDX: 0000000020000440 RSI: 00000000c00c6211 RDI: 0000000000000004 [ 819.271863][T19235] RBP: 00007f7994ee308d R08: 0000000000000000 R09: 0000000000000000 [ 819.271878][T19235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.271892][T19235] R13: 00007ffd314a72cf R14: 00007f79960c2300 R15: 0000000000022000 [ 819.271917][T19235] [ 819.367098][T19242] autofs4:pid:19242:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11), cmd(0xc018937e) [ 819.367130][T19242] autofs4:pid:19242:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 819.472987][T19252] binder: 19245:19252 ioctl c0306201 20001480 returned -14 [ 819.473280][T19250] autofs4:pid:19250:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc018937e) [ 819.473311][T19250] autofs4:pid:19250:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 819.555474][T19260] autofs4:pid:19260:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.65280), cmd(0xc018937e) [ 819.555513][T19260] autofs4:pid:19260:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 819.559237][T19262] binder: 19259:19262 ioctl c0306201 20001480 returned -14 [ 819.576141][T19262] binder: 19259:19262 ioctl c018620c 20000440 returned -22 [ 819.632127][T19270] autofs4:pid:19270:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc018937e) [ 819.632160][T19270] autofs4:pid:19270:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 06:07:14 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x700, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x44b8) 06:07:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306203, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:14 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x3}}, './file0\x00'}) 06:07:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x0, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) [ 820.049092][T19282] binder: 19273:19282 ioctl c0306201 20001480 returned -14 [ 820.138521][T19292] binder: 19288:19292 ioctl c0306201 20001480 returned -14 [ 820.218524][T19295] binder: 19294:19295 ioctl c0306201 20001480 returned -14 06:07:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306205, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x900, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:14 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x4}}, './file0\x00'}) [ 820.220416][T19295] binder: 19294:19295 ioctl c0306202 20000440 returned -22 [ 820.586601][T19305] binder: 19303:19305 ioctl c0306201 20001480 returned -14 06:07:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x44d0) 06:07:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306209, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x1020, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 820.591389][T19305] binder: 19303:19305 ioctl c0306203 20000440 returned -22 [ 820.644881][T19312] binder: 19311:19312 ioctl c0306201 20001480 returned -14 [ 820.645993][T19312] binder: 19311:19312 ioctl c0306205 20000440 returned -22 [ 820.717501][T19322] binder: 19320:19322 ioctl c0306201 20001480 returned -14 [ 820.733053][T19322] binder: 19320:19322 ioctl c0306209 20000440 returned -22 06:07:14 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x44e8) 06:07:14 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 06:07:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306215, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x2000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x0, 0x80000001, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:14 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0xb}}, './file0\x00'}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x2010, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:14 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4500) 06:07:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306218, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 821.130348][T19334] binder: 19325:19334 ioctl c0306201 20001480 returned -14 [ 821.132875][T19334] binder: 19325:19334 ioctl c0306215 20000440 returned -22 06:07:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000600)="c4c1f95a318fe8e8a3804e160000c50f20e035800000000f22e00f06660f71d26666bad104ec0f015cf40fc4e225b835390000000f01d436363e660fc7b7229d50bf", 0x42}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype3, @cr4={0x1, 0x8}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x80800) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="09f4ce0fabdc86e81312a24dabc74ce4", @ANYRES32=r2, @ANYBLOB="1a0300"/16]) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x1040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x3, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="09080000014067829ddd0000", @ANYRES32, @ANYBLOB="02000004000000002e2f66696c653000"]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x5, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="94f10f475481d08608a7f4a9b295194a94a49e32f415dc92504a1712f4da233acef7902586e5ec936dfa2614fbc249b3333e2a0b13fc8d5edb557adc12d6515d1e6adf0dbaa0c00607100faa13f503e9df90c77dbc09b670c940513558d82627571f2180d40af39d08f45d2e89e3760d8bc690438ac99c631214fd49938101a4a434b050cd8b60e157dafb6bef1cae5b191ac1748eb8ae8ef1f4c530153d3159ad4b138a18024a935e91f1a7aea89920e2d71b6d6e926d691b20c4a3361484291451f15e7f85a1ab7fe7a078d3cfd4bd67", 0xd1, 0x8}], 0x2100401, &(0x7f0000000540)={[{@noextent_cache}, {@disable_ext_identify}, {@noquota}], [{@dont_appraise}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'configfs\x00'}}, {@subj_type={'subj_type', 0x3d, '+%^.('}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@measure}, {@dont_hash}, {@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 06:07:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x3f00, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 821.213040][T19344] binder: 19341:19344 ioctl c0306201 20001480 returned -14 [ 821.214182][T19344] binder: 19341:19344 ioctl c0306218 20000440 returned -22 06:07:15 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:15 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4518) 06:07:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x4000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000600)="c4c1f95a318fe8e8a3804e160000c50f20e035800000000f22e00f06660f71d26666bad104ec0f015cf40fc4e225b835390000000f01d436363e660fc7b7229d50bf", 0x42}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype3, @cr4={0x1, 0x8}], 0x2) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000040)='./file0\x00') (async) r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x80800) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="09f4ce0fabdc86e81312a24dabc74ce4", @ANYRES32=r2, @ANYBLOB="1a0300"/16]) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x1040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x3, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="09080000014067829ddd0000", @ANYRES32, @ANYBLOB="02000004000000002e2f66696c653000"]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x5, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="94f10f475481d08608a7f4a9b295194a94a49e32f415dc92504a1712f4da233acef7902586e5ec936dfa2614fbc249b3333e2a0b13fc8d5edb557adc12d6515d1e6adf0dbaa0c00607100faa13f503e9df90c77dbc09b670c940513558d82627571f2180d40af39d08f45d2e89e3760d8bc690438ac99c631214fd49938101a4a434b050cd8b60e157dafb6bef1cae5b191ac1748eb8ae8ef1f4c530153d3159ad4b138a18024a935e91f1a7aea89920e2d71b6d6e926d691b20c4a3361484291451f15e7f85a1ab7fe7a078d3cfd4bd67", 0xd1, 0x8}], 0x2100401, &(0x7f0000000540)={[{@noextent_cache}, {@disable_ext_identify}, {@noquota}], [{@dont_appraise}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'configfs\x00'}}, {@subj_type={'subj_type', 0x3d, '+%^.('}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@measure}, {@dont_hash}, {@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 06:07:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x0, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0xedc0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:15 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4530) 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc030622d, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000600)="c4c1f95a318fe8e8a3804e160000c50f20e035800000000f22e00f06660f71d26666bad104ec0f015cf40fc4e225b835390000000f01d436363e660fc7b7229d50bf", 0x42}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype3, @cr4={0x1, 0x8}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000040)='./file0\x00') r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x80800) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="09f4ce0fabdc86e81312a24dabc74ce4", @ANYRES32=r2, @ANYBLOB="1a0300"/16]) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x1040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x3, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="09080000014067829ddd0000", @ANYRES32, @ANYBLOB="02000004000000002e2f66696c653000"]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 32) sendfile(r4, r5, 0x0, 0x800000080004103) r6 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x5, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="94f10f475481d08608a7f4a9b295194a94a49e32f415dc92504a1712f4da233acef7902586e5ec936dfa2614fbc249b3333e2a0b13fc8d5edb557adc12d6515d1e6adf0dbaa0c00607100faa13f503e9df90c77dbc09b670c940513558d82627571f2180d40af39d08f45d2e89e3760d8bc690438ac99c631214fd49938101a4a434b050cd8b60e157dafb6bef1cae5b191ac1748eb8ae8ef1f4c530153d3159ad4b138a18024a935e91f1a7aea89920e2d71b6d6e926d691b20c4a3361484291451f15e7f85a1ab7fe7a078d3cfd4bd67", 0xd1, 0x8}], 0x2100401, &(0x7f0000000540)={[{@noextent_cache}, {@disable_ext_identify}, {@noquota}], [{@dont_appraise}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'configfs\x00'}}, {@subj_type={'subj_type', 0x3d, '+%^.('}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@measure}, {@dont_hash}, {@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) [ 821.721706][T19361] binder: 19351:19361 ioctl c0306201 20001480 returned -14 [ 821.722831][T19361] binder: 19351:19361 ioctl c0306225 20000440 returned -22 06:07:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0xff00, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 821.793679][T19371] binder: 19369:19371 ioctl c0306201 20001480 returned -14 [ 821.805817][T19371] binder: 19369:19371 ioctl c030622d 20000440 returned -22 [ 821.874179][T19378] binder: 19376:19378 ioctl c0306201 20001480 returned -14 [ 821.875282][T19378] binder: 19376:19378 ioctl c0306263 20000440 returned -22 06:07:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:15 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:15 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4548) 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x2, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x400000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x0, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:15 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:15 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4560) 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x3, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0xfeffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 822.268483][T19389] binder: 19382:19389 ioctl c0306201 20001480 returned -14 [ 822.269548][T19389] binder: 19382:19389 unknown command 16456 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x4, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 822.269566][T19389] binder: 19382:19389 ioctl c0306201 20000440 returned -22 06:07:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 822.337064][T19400] binder: 19396:19400 ioctl c0306201 20001480 returned -14 [ 822.339213][T19400] binder: 19396:19400 unknown command 64 [ 822.339233][T19400] binder: 19396:19400 ioctl c0306201 20000440 returned -22 [ 822.366488][T19402] binder: 19401:19402 ioctl c0306201 20001480 returned -14 [ 822.370763][T19402] binder: 19401:19402 unknown command 0 [ 822.370783][T19402] binder: 19401:19402 ioctl c0306201 20000440 returned -22 [ 822.439486][T19406] binder: 19405:19406 ioctl c0306201 20001480 returned -14 [ 822.440650][T19406] binder: 19405:19406 unknown command 0 [ 822.440669][T19406] binder: 19405:19406 ioctl c0306201 20000440 returned -22 [ 822.577809][ T6097] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 822.787808][ T6097] usb 4-1: device descriptor read/64, error 18 [ 823.057774][ T6097] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 823.247742][ T6097] usb 4-1: device descriptor read/64, error 18 [ 823.367874][ T6097] usb usb4-port1: attempt power cycle [ 823.787729][ T6097] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 823.889354][ T6097] usb 4-1: Invalid ep0 maxpacket: 0 [ 824.037736][ T6097] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 824.137885][ T6097] usb 4-1: Invalid ep0 maxpacket: 0 [ 824.138572][ T6097] usb usb4-port1: unable to enumerate USB device 06:07:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:18 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x46, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 06:07:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x1000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x6, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:18 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4578) 06:07:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x0, '\x00', 0x4}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:18 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) 06:07:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x2000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x7, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) [ 825.316424][T19413] binder: 19411:19413 ioctl c0306201 20001480 returned -14 [ 825.317425][T19413] binder: 19411:19413 unknown command 0 06:07:18 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x4590) [ 825.317444][T19413] binder: 19411:19413 ioctl c0306201 20000440 returned -22 06:07:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x3000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:19 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 825.411960][T19428] binder: 19425:19428 ioctl c0306201 20001480 returned -14 [ 825.414326][T19428] binder: 19425:19428 unknown command 0 [ 825.414345][T19428] binder: 19425:19428 ioctl c0306201 20000440 returned -22 [ 825.757781][ T4125] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 825.947789][ T4125] usb 4-1: device descriptor read/64, error 18 [ 826.217741][ T4125] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 826.407886][ T4125] usb 4-1: device descriptor read/64, error 18 [ 826.528018][ T4125] usb usb4-port1: attempt power cycle [ 826.938036][ T4125] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 827.037817][ T4125] usb 4-1: Invalid ep0 maxpacket: 0 [ 827.187818][ T4125] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 827.287823][ T4125] usb 4-1: Invalid ep0 maxpacket: 0 [ 827.288201][ T4125] usb usb4-port1: unable to enumerate USB device 06:07:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x5d, 0x4b, 0x0, 0x6a5, 0xd800, 0x8712, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x30, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) 06:07:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x48, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x4000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:21 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x45a8) 06:07:21 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) 06:07:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018660000020000000000000000010000851000000a00002085100000fcffffff18260000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0xe8, &(0x7f0000000440)=""/232, 0x40e00, 0x8, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x9, 0x20}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone3(0x0, 0xffffffffffffff9f) syz_clone3(&(0x7f00000004c0)={0x10100400, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x14}, &(0x7f0000000300)=""/118, 0x76, &(0x7f0000000400)=""/101, &(0x7f0000000480)=[r3, r3, r3, r3, r3], 0x5}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_clone3(&(0x7f00000000c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x34}, &(0x7f0000000e80)=""/178, 0xb2, &(0x7f0000000180)=""/161, &(0x7f00000008c0)=[r3, r3, r4, 0x0, r5, 0x0], 0x6}, 0x58) pidfd_open(0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x42042000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, &(0x7f0000000f40)=""/249, 0x0, 0x0, {r1}}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000001c0)=0x4f9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000900)={{0x8, 0x1, 0x10000, 0x80000001}, 0x1, [0x101, 0x3f, 0x2, 0x9, 0x7, 0x0, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x7a3, 0xbe0, 0x5, 0x81, 0x800, 0x9, 0xfffffffffffffffd, 0x1, 0x8000, 0x7fffffffffffffff, 0x8, 0x9, 0x8000000000000001, 0x8, 0x1f, 0x9, 0x4, 0xffff, 0x1fffa160, 0x800, 0x8001, 0x401, 0x2, 0x20, 0x4c, 0x1ff, 0x107, 0x1, 0x3d2a050e, 0x9, 0x5, 0x8001, 0x6, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x47, 0xffffffffffffffff, 0x100000001, 0x58, 0x4, 0x84a, 0xfffffffffffffffd, 0x9, 0x100, 0x87, 0xc4, 0x0, 0x400, 0x3, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x6, 0xfedf, 0x3, 0x3, 0x8, 0x80, 0x1, 0x4, 0xffffffff, 0x3f, 0x5965ccd0, 0x4, 0x8, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x7, 0x0, 0x8c4, 0x40000000000000, 0x5, 0x9, 0x2, 0xdea, 0x2, 0x3, 0x4, 0x0, 0x9, 0x101, 0x5, 0x7f, 0x7f, 0x5, 0x0, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x5, 0x5, 0xab2, 0xa5c0, 0x5, 0x4a65, 0x8000, 0x3b8d2aa5, 0x9, 0x8, 0x7f, 0x611f4e9a, 0xffffffffffffffff, 0x1, 0xe0, 0x7, 0x9, 0xfff]}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80, 0xa77]}) 06:07:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x5000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x4c, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f00000014c0)='+'}) 06:07:22 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="050000010100000058ed54dd", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) 06:07:22 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4c, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x45c0) [ 828.389962][T19447] binder: 19437:19447 ioctl c0306201 20001480 returned -14 [ 828.391199][T19447] binder: 19437:19447 unknown command 0 [ 828.391217][T19447] binder: 19437:19447 ioctl c0306201 20000440 returned -22 06:07:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x5437, 0x0) mount$9p_fd(0x6000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:07:22 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="050000010100000058ed54dd", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="050000010100000058ed54dd", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) [ 828.493609][T19456] binder: 19452:19456 ioctl c0306201 20001480 returned -14 [ 828.847817][ T4124] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 829.047814][ T4124] usb 4-1: device descriptor read/64, error 18