Extracting prog: 40m30.238614731s
Minimizing prog: 19m21.061283663s
Simplifying prog options: 0s
Extracting C: 29.897439092s
Simplifying C: 8m21.263161531s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCAPPLICATION-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 18, 13, 18, 28, 26, 9, 29, 21, 13, 28, 17, 19, 17, 28, 14, 26, 14, 23, 13, 22, 12, 21, 3, 9, 5, 17, 29, 21, 11]
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0)
syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080)
r1 = io_uring_setup(0x1612, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = inotify_init()
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r3]}, 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000080), 0x51)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x20008090)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r6 = dup(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000400)=@ieee802154, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000500)=""/121, 0x79}], 0x5, &(0x7f0000000600)=""/120, 0x78}, 0x40010101)
executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x2, 0x4})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="28005a80040000802000018004000600010000001100010018300b040200480c6c0b18"], 0x44}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0))
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x200013, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
executing program 2:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
lstat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
executing program 0:
r0 = io_uring_setup(0x8002030e, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020"], 0x38}, 0x40)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x3}, 0x2}, 0x18)
write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
socket$inet(0x2, 0x7, 0x9)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x15, 0x0, &(0x7f0000000040)="4006d678eb236a9327801f69e89d35a8241552fa8d", 0x0}, 0x50)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r6, &(0x7f0000004740)='\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="080000004180000000000000ae0e00cc33b72fc4b48c0bd1f4a6160c8d0b79556cfab0ca8a3d90427d8b156f5d38f531ecba5340d3562cc7"], &(0x7f0000000340), 0x1200)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000240))
sendfile(r4, r4, 0x0, 0x30)
executing program 3:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0xec9, r2, 0x12, {0x956, 0xf}, 0xf3}, 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x477, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x465, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="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", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 1:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet(0xa, 0x1, 0x85)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e1d, @local}, 0x10)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2fe, 0x40000001, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x309501)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x34, 0x2d, 0x65, 0x65, 0x64, 0x30, 0x61, 0x57, 0x39, 0x30, 0x33, 0x63, 0x30]}, &(0x7f00000005c0)={0x0, "72eb80337f1ed47db6a1768ec9b73020061542519a52e08c63188d1bd903a89b78dd29cacea5ba3cea1065a33f55781825a8286f504c2de89970c7e025cfc5a3", 0x23}, 0x48, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, r3, 0x0)
write(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xb8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x1, r5, 0x32, r7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ac09000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='cachefiles_io_error\x00', r8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r8, 0x0, 0x10000000000000}, 0x18)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r1=>0x0], 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x500, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000880)={0x1, 0x400, 0x0, 0xb, 0xfffffffffffff000, 0x4, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0xfffffffe, 0x1})
executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r0})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xfc}}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0x17, 0x8}, 0xfffffffb, 0x3, 0x2})
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000400)=0x80)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, "23f567d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r3, 0x5437, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x8b5, {{0x2, 0x4e22, @remote}}}, 0x88)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xs_stream_read_data\x00', r6, 0x0, 0x10000000008c}, 0x18)
executing program 4:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0xec9, r2, 0x12, {0x956, 0xf}, 0xf3}, 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
executing program 1:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r2, {0x7}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
membarrier(0x40, 0x0)
membarrier(0x20, 0x0)
r4 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$setown(r1, 0x8, r3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r6, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
executing program 4:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x13, 0x2, 'H='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
executing program 3:
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
executing program 2:
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ae8178108612a41fb8650102030109022400"], 0x0)
socket(0x15, 0x5, 0x9)
memfd_create(&(0x7f0000000480)='!.\x00', 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000040)=0xc)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
executing program 4:
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x479, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x467, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="288f5a83ff3916989d8566d51246f48700ee157e12f704f81ca0f017c5c02ffccad33207c55baecd1d5224ee1892a6e134d52699433de1f1932dbc8fb7887cb9a0a03416e3f135bc6129152106b8168023dedde0faa97fd4752873c24bdc4a76e9dfa2cc0805e930233eb7ab7a486b0d6b665fb275c1e68675ebef3558d8c21cfa2728f6652327ae2bcde721ad523e78b1bb9b361343e1e0cc45a0f38263594f9c668308042652b20fbd94c43c1c9d36d29bee52291f65671499dc4579036618c044c76637aa64e98430e2bff04e8f4b056f215b8c4c47e17e35b6651ba76add2bad22bf5cd1be00f3acf7131702e73acbf0a90dd7eb6c15d7a60dcb", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 2:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2003, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCAPPLICATION-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 18, 13, 18, 28, 26, 9, 29, 21, 13, 28, 17, 19, 17, 28, 14, 26, 14, 23, 13, 22, 12, 21, 3, 9, 5, 17, 29, 21, 11]
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000d80)=ANY=[@ANYBLOB="0180c2000000cc5b77f14fdc86dd6000000003803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af18020001000100000000001995319cff0518fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000030bd47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032164fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb00145e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed36e8e87468f16f6ee1f2653392541c63a6aa468cff996a67d895d17419b936284b9767c796b44129d62c60dc800270b13d2ade5b5fb983c55f5f2b69306a625ad2982a36ae41c92e3e88a7e564792214da25c0e7c645b433259adf8e449f6d5034063d"], 0x0)
syz_open_dev$rtc(&(0x7f0000001400), 0x0, 0x20080)
r1 = io_uring_setup(0x1612, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = inotify_init()
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r3]}, 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000080), 0x51)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x20008090)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r6 = dup(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000400)=@ieee802154, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000500)=""/121, 0x79}], 0x5, &(0x7f0000000600)=""/120, 0x78}, 0x40010101)
executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x2, 0x4})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="28005a80040000802000018004000600010000001100010018300b040200480c6c0b18"], 0x44}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0))
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x200013, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
executing program 2:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
lstat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0))
executing program 0:
r0 = io_uring_setup(0x8002030e, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020"], 0x38}, 0x40)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x3}, 0x2}, 0x18)
write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
socket$inet(0x2, 0x7, 0x9)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x15, 0x0, &(0x7f0000000040)="4006d678eb236a9327801f69e89d35a8241552fa8d", 0x0}, 0x50)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r6, &(0x7f0000004740)='\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="080000004180000000000000ae0e00cc33b72fc4b48c0bd1f4a6160c8d0b79556cfab0ca8a3d90427d8b156f5d38f531ecba5340d3562cc7"], &(0x7f0000000340), 0x1200)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000240))
sendfile(r4, r4, 0x0, 0x30)
executing program 3:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0xec9, r2, 0x12, {0x956, 0xf}, 0xf3}, 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x477, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x465, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="288f5a83ff3916989d8566d51246f48700ee157e12f704f81ca0f017c5c02ffccad33207c55baecd1d5224ee1892a6e134d52699433de1f1932dbc8fb7887cb9a0a03416e3f135bc6129152106b8168023dedde0faa97fd4752873c24bdc4a76e9dfa2cc0805e930233eb7ab7a486b0d6b665fb275c1e68675ebef3558d8c21cfa2728f6652327ae2bcde721ad523e78b1bb9b361343e1e0cc45a0f38263594f9c668308042652b20fbd94c43c1c9d36d29bee52291f65671499dc4579036618c044c76637aa64e98430e2bff04e8f4b056f215b8c4c47e17e35b6651ba76add2bad22bf5cd1be00f3acf7131702e73acbf0a90dd7eb6c15d7a60dcb", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 1:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet(0xa, 0x1, 0x85)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e1d, @local}, 0x10)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2fe, 0x40000001, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x309501)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x34, 0x2d, 0x65, 0x65, 0x64, 0x30, 0x61, 0x57, 0x39, 0x30, 0x33, 0x63, 0x30]}, &(0x7f00000005c0)={0x0, "72eb80337f1ed47db6a1768ec9b73020061542519a52e08c63188d1bd903a89b78dd29cacea5ba3cea1065a33f55781825a8286f504c2de89970c7e025cfc5a3", 0x23}, 0x48, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, r3, 0x0)
write(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xb8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x1, r5, 0x32, r7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ac09000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='cachefiles_io_error\x00', r8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r8, 0x0, 0x10000000000000}, 0x18)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r1=>0x0], 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x500, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000880)={0x1, 0x400, 0x0, 0xb, 0xfffffffffffff000, 0x4, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0xfffffffe, 0x1})
executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r0})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xfc}}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0x17, 0x8}, 0xfffffffb, 0x3, 0x2})
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000400)=0x80)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, "23f567d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r3, 0x5437, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x8b5, {{0x2, 0x4e22, @remote}}}, 0x88)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xs_stream_read_data\x00', r6, 0x0, 0x10000000008c}, 0x18)
executing program 4:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0xec9, r2, 0x12, {0x956, 0xf}, 0xf3}, 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
executing program 1:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r2, {0x7}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
membarrier(0x40, 0x0)
membarrier(0x20, 0x0)
r4 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$setown(r1, 0x8, r3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r6, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
executing program 4:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x13, 0x2, 'H='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
executing program 3:
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
executing program 2:
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ae8178108612a41fb8650102030109022400"], 0x0)
socket(0x15, 0x5, 0x9)
memfd_create(&(0x7f0000000480)='!.\x00', 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000040)=0xc)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
executing program 4:
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x479, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x467, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="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", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 2:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2003, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: bisecting 30 programs
bisect: split chunks (needed=false): <29>
bisect: split chunk #0 of len 29 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 17, 19, 17, 28, 14, 26, 14, 23, 13, 22, 12, 21, 3, 9, 5, 17, 29, 21, 11]
detailed listing:
executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000076, 0x309501)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x34, 0x2d, 0x65, 0x65, 0x64, 0x30, 0x61, 0x57, 0x39, 0x30, 0x33, 0x63, 0x30]}, &(0x7f00000005c0)={0x0, "72eb80337f1ed47db6a1768ec9b73020061542519a52e08c63188d1bd903a89b78dd29cacea5ba3cea1065a33f55781825a8286f504c2de89970c7e025cfc5a3", 0x23}, 0x48, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, r3, 0x0)
write(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xb8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x1, r5, 0x32, r7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ac09000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='cachefiles_io_error\x00', r8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r8, 0x0, 0x10000000000000}, 0x18)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r1=>0x0], 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x500, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000880)={0x1, 0x400, 0x0, 0xb, 0xfffffffffffff000, 0x4, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0xfffffffe, 0x1})
executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r0})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xfc}}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0x17, 0x8}, 0xfffffffb, 0x3, 0x2})
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000400)=0x80)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, "23f567d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r3, 0x5437, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x8b5, {{0x2, 0x4e22, @remote}}}, 0x88)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xs_stream_read_data\x00', r6, 0x0, 0x10000000008c}, 0x18)
executing program 4:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000440)={0xec9, r2, 0x12, {0x956, 0xf}, 0xf3}, 0x1)
socket$inet_dccp(0x2, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
executing program 1:
socket$alg(0x26, 0x5, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_ethernet(0x72, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r2, {0x7}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
membarrier(0x40, 0x0)
membarrier(0x20, 0x0)
r4 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$setown(r1, 0x8, r3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r6, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
executing program 4:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x13, 0x2, 'H='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
executing program 3:
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
executing program 2:
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ae8178108612a41fb8650102030109022400"], 0x0)
socket(0x15, 0x5, 0x9)
memfd_create(&(0x7f0000000480)='!.\x00', 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000040)=0xc)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
executing program 4:
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x479, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x467, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="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", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 2:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2003, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12, 21, 3, 9, 5, 17, 29, 21, 11]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x13, 0x2, 'H='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
executing program 3:
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
executing program 2:
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ae8178108612a41fb8650102030109022400"], 0x0)
socket(0x15, 0x5, 0x9)
memfd_create(&(0x7f0000000480)='!.\x00', 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000040)=0xc)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
executing program 4:
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x479, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x467, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="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", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 2:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2003, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCAPPLICATION-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_open_dev$I2C-preadv
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
bisect: split chunks (needed=true): <9>
bisect: split chunk #0 of len 9 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 17, 29, 21, 11]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r2, 0x105, 0x5000003a, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x210801)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x884d, 0x10, 0x1, {0x22, 0x3d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x40, 0x8, 0x3}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "78ded8b8bcddfd17a7e4541c75d2f194"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "1bd2be9ba366acced123d783dd34fa18"}]}, 0x2, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "a925e69db372f7af8d1c3d1f9aeeb99f6bd1e6f0a7961b63d4cadaf5da532085c28d8dadab9e0af5a635a80bb7b81bdc3903db065ccf102e885151864e335837c93b04a2fc59b2dc2b24"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r1, 0x8, 0x20, &(0x7f00000002c0)=""/32)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x26f, 0x42)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000380)={r3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000003c0)={0x0, "785d2570236a11e108effad14b0545b3ffd1a7ff77c6501ae9f791d765a49dfc", <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x1, r4})
r5 = io_uring_setup(0x75a, &(0x7f0000000440)={0x0, 0x90d1, 0x20, 0x1, 0x267})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0), 0x0)
syz_usb_connect(0x3, 0x479, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xed, 0x51, 0x80, 0xff, 0x19d2, 0x157, 0x61b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x467, 0x2, 0x7, 0x7, 0x40, 0xdc, [{{0x9, 0x4, 0x5, 0x6, 0x8, 0xd2, 0x16, 0xb1, 0x7, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xe0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfa, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xc, 0x1000}, @generic={0xd9, 0x22, "85a58e8c4f65e0f97fb5a30fde07c3b42971eeaced2161ce7dc6dd662f49172b2ceee58c493dc42d053276e08014510f592473d7550ce724cc0d22f8ff91fe0d2b6df2a037b4cda11e5e27f3eedb68f2d4feaf220a5a1c196729fa7d6afa6669aba404314df0cea6da5eb3521bfeba81564cbcc3af5cb2f37be888eda1e154c490013bc6b8e8aff246051cd087e6013557acd230fa5e97864a1ca1619574d3ac1ceaac26d96eedc88e29e9d82fef721b913cbfd77e396032e5fffc1f1b634340e135ee1820b7443ba62de187950c9be467b9e926773ba7"}]}}, {{0x9, 0x5, 0x6, 0xbccf94029964c525, 0x218, 0x0, 0x85, 0x5, [@generic={0xf0, 0xc, "f41bfef6688492c3e119ee1a240ecf6a3a7498472d7f514bb0107c427c210f62de8ab835d483fdfb66e3efa73febeb2999c96a2184f02324051c80d93f6da80cfd072c24bb93872ce9ab6dbedf1a7b83981759ec49fac4f9806d109fd01838d0faf4314b8153a335dc96f18dca87b50a10cb2f71e063b9810738e1fbdd26a08d209b7b9876536b4bfb46ea3d0633941e6ed0b936e77fcc76c28b2b6d2403c87b94f822604054a3bebd1bc78c6e7ec99d043f94d0ece6bfb9030da043da0bcf6ac2a22257a214fb1f05a43b7a6d237c9c56d092321b5eef8e61204a13cb39c00bead5135cabf405f87411263d4e9a"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xe, 0x4, 0x620, 0x9, 0x5b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xcaf}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xcd, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x200}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x1}}]}}, {{0x9, 0x4, 0xf8, 0x3, 0x3, 0x69, 0x5e, 0xc8, 0x4, [@generic={0xfb, 0x21, "dd73b947563ef3abb42ddbd426636f19c3bfe9151c545e47996f6c6d9515884840c526d6c8101e920dc6ae8a0739fbeb0ea340a7f6f0e2fb700e7c1f2f4500546829c0f5899e65278f4859e62f9999fac38f727949919e03a80f38471492bce5dbf4d377d7e93d02ab1869b176b44ed2fdcff7e097fb9f3d217da9eee76b719e3be704214e0b1eea93ec63ab79ba04439cf28f4569e49342191ae011d3a13c8f25497637ae0e285d520dbad2615fe87173f03564166c63aabd441bb813e0adfe40a280b63f5f8c7d4358ad8863634a937b734b3d9040c6522b71da0f53ac1e3d4574515116e09a4fc51dceb0f4b2636805263fde517090bfdb"}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "bfbcdd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, '1\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0xfd, "509ecfef"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x99, 0x7f, "09081a7563810196"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xae94, 0x4, 0x5, "a0997090cbc8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5d, 0x1, 0x4, 0xf, '\n!6', 'fe,'}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x4, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xad}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1}, @generic={0x9b, 0x8, "314d7f27a151cdcc560f48cca661d8592d7ce9a45c5d48e5fff211e29ab4ff1dd1cc192405c3dbee5be5bfd31ccddb5130dfd245c18bfbaa0024800c9b45b0df7808c61954dd53ba35cda43069ffb88c99265d79bcfdf16e0371c653677e7746a1c53ab1ee648684b45772e5abaf3db038c2b9a0e9a042c93d5f9798c0aa9103c70cb38b7ce19bd0278a8bf5982ec77d9b7fbb0d5e0e74650e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x9, 0x3c}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0xfe, 0x2, 0xa, 0x40, 0x8b}, 0x8a, &(0x7f0000000ac0)={0x5, 0xf, 0x8a, 0x6, [@generic={0x5f, 0x10, 0x0, "c0fe8549e40b6c9b6ad8db2cc8f3d5762c48d939befe6daaee2d5aba199956c2f242f8787816c18e4679ccc2a7dba9bc6609ebd52aaa445c84f3227b1696f4a5754a9fdb3efb223caae3e012ff765ede9c3b0fdedba3b03f4442ded8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xff, 0xe, 0xa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x6c00}]}, 0x3, [{0xf4, &(0x7f0000000b80)=@string={0xf4, 0x3, "0b81d26a82f3198979cdc48fb4194ba6613e3cfae6dec3a9206d3338c3fe3b98a3440c513652fd003c929f884141d5090d726a6a63b75eccea930133f6673eb0be5b0e337de18ff321497bd9b137e5144d88d320b22537bc7d772c5aeb5070af4434aee4d2913dc0122af167fa508e0481a3646d80b7cff946316d02505992901cd495f5a8783278570c26065f57a7afefcce2116c7f2431cc007cfe16eed7f7742d652cd4df4e083b7c0043ac741bcdd305b9ba85bd48dec7a730c03f14770b2f61f1b5a7388560e1d4a768763b0d6ce43f3739a9794586c6534d53070ab90416770fb51a45c5a5c74bf6e32fb01d80cea9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_connect(0x2, 0x4f4, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xb4, 0xfd, 0x5b, 0xff, 0x1a86, 0x5523, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e2, 0x4, 0x8, 0x8, 0x60, 0x3, [{{0x9, 0x4, 0xe, 0x7, 0x3, 0x87, 0x1, 0x26, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x92a}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9171c0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3000, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x22}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0xaa, 0xdf, [@generic={0xd0, 0x4, "93ddcb2332e5c05dc79f9696e469fa5f2fcf5c231cc2c96d6a22f5890ba5c0d051e248643c8585e7acb91ae6ef4efc3959ad6b14b445439bd931b29059fb8049a34927142922530ea1b59e2348764ce46f0c431a12e40d7e342fd41cbc91cbccc2cdcd4727620276c913f2275096e4be69d9287aef192d8f54cb8d3c298872a48edcbabf5cad72e10ed581b200148b89590b042853634282aa1c989d3601e9d5b1132c58061e324360f6d1601104fcf3b4fd4d01a7691a5c5c1d85b9069be7b62670fb45dcf97ea4c26cf0d0fad2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9e, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x80, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x68}, @generic={0x1c, 0x23, "b12826bdbe275529f15163902a66ff83bc8271290131d1a2b7ea"}]}}]}}, {{0x9, 0x4, 0x12, 0x7, 0x6, 0xe6, 0x46, 0xe7, 0xeb, [@uac_control={{0xa, 0x24, 0x1, 0x44b, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0x4, "5391a1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x5, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x8, 0x2, 0x6, 0xbc}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0a8becd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x400, 0x2, 0xc}}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0x8, 0xca, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x72, 0x5b}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x80, 0x2, [@generic={0x19, 0x30, "299e3482e1d61168aca45f613256314f9ec6a8a660c666"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4e, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x0, 0x2, [@generic={0x1d, 0x10, "0b004f31068aff36811330ab22cee05efa8965577723264c10817f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x2}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f92190"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x96ec, 0x40, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x9, 0x27}, [@obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x7f}, @mdlm_detail={0xbe, 0x24, 0x13, 0x7f, "1adbd944796b62f78e725be8c689abd32874f8d60a5fe5efd9a379a0f7794818b0727a0eca76d5c5aaee5b360cd2b9162c8fb96827a52b0668c5d80d161be886394e9bd561a4aa44d0be4767c3435e463571ffaa61153e22f198dddef3c7ff5fbb03c7e6ef4166f2d2be931d8d45440094c80a60605e61a1abd2cf3f7e80b530cb14bab4d34d47a9248c5d7900aaa640c1453651137f612cf8e3d9b83ee3b5d45266c6eca030dd54bd5f136faaf89ba8e820d3e57cfcd8c81928"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x16, 0xdf, 0x6f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0xf8, 0x2, [@generic={0x4b, 0xd, "a84256e7efc881bca0e8adbd495e37feff42407e9c01581b48f4b84005bdd8e55efbf19899b4a52807c396c35b1e9fd8f8c4d7eb3bcf40568c4a4d83adaea80af6e2f95d7be9a51970"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x53}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x69, 0x76, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x40, 0x8, 0xfe, [@generic={0xfb, 0x22, "8c48b1b8a8b1b0cbc158f666d1dd1cc156a27e75100602590d872fd9da7766cb85eeb463936be6ef2b47db473c9613aa27a404629ea122cd30703d72b4890c1e3e9d0ed4209da4f3f88b63d2f502503515407fee5b6d902c5b0d8d734c55535693bc4331d0f1313b78b886ea2449d4a934e508fa90d8dc3f7bc2daf6e06283e2136a73cf351771074be870682492fc19119f99683de22304957842e5a8b81fbef1834413eb3056ffce6d3ed89295f366fdcf5b402b9190c6897370b356954cdc0596af16ea3e2e79d9dd936299396ace704d1d2084b9d5564b39930833c477bf3b2c0a418bf3daaf945ea07b475d6107a2c40a26e7116e6de4"}, @generic={0x16, 0xe, "751ecebfa5b67796a97b6845e28b7404366c3e15"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa1, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xe, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd8, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}]}}]}}, {{0x9, 0x4, 0xe8, 0xe, 0x0, 0xff, 0x6, 0x4, 0xa}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x20}, 0x55, &(0x7f0000001280)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2e, 0x2, 0xe, 0xc2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x1b08}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8, 0xf00, 0x5, [0xff0000, 0xff0000, 0x0, 0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cd0bdedc70c7e74dc9a216b00a273fef"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x7f}]}, 0x3, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f0000001340)=@string={0xd2, 0x3, "595840cd4b73e360f9b271ce6cfaa00438f3b3a1912e3e50c38e6fbf8acaf60f479c7bd308bc989d833a1335bff63ba16b3e21bc4a74a3a686a3b214718e16966fea640d4018db3d18e2e086f879257f5bdc4a1169f8c8075b26c00dbca323e6f3a26b01a9ae6a6ea5afd83615b2620b86c3aa25f01f9331195ca24e9fca1c44765fd9a5117b481b7986ea2faa6684bcb815a8f82ec9e4ed00d655a0f9c4f9ec2518f763a7687b91a14720f2e8d27ef441fb60aba58d40a57686fec1e04a1689e4e0b981d13c6b1d457efe0d7e853112"}}, {0x19, &(0x7f0000001440)=@string={0x19, 0x3, "be12c8ca5b2a9dacf98677f73479393cd92d7b73b84ffd"}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0xf4302, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="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", 0xfc}], 0x1, &(0x7f0000001680)="e096173e366084c487fd6b59838b902d90f0e5835090d889c6f7dda6a35eb9d7e7f9a1864d7ff2a5fd5593a3b857ee6e4d8d62a2c65026a5dd64ee9fc2204e3e7eb70f3acf02341d92ff6bdd4b01fd20602644e62b55804b52d0137a2f46d1f2be3cc1be66f222a454d105bed3b5d4137e440663dac4a90c1717e023ad24f6d57c101537e88b734992fcae995b48f7564d1383ca4404ee43f3a22cc1c6bfcd86942a428566beaa669c845a49ecb12c3e3c9d3cd9a9fdeb4c9f34d58b28e38419c873e20e4511f2e45c55943df01e90a6bd36cbc52818f57b73", 0xd9, 0x8b67eb1154599221}, 0x40000)
recvmsg(r7, &(0x7f0000002f40)={&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/194, 0xc2}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ec0)=""/87, 0x57}, 0x2)
mknod(&(0x7f0000002f80)='./file0\x00', 0x20, 0x2)
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x9)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000002fc0)={0xf, 0x4, 0x3}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xae, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd02}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x310, 0xa3, 0x0, 0xf, 0x40, 0x1}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3}]}, 0x8, [{0xb4, &(0x7f00000030c0)=@string={0xb4, 0x3, "af1d8deb8aaeb0a491d21970915d779fb30da76bf913a62918fb202e2f6d483a888d84d1328fcd0e5e3c7334371d7b0f43638a64aeaaeddc760906a76c0c44e1d6daeb2e36a624ad6819a3032d3ac858d32071c489a0f3bba6ce751ea10d6efa7d7f6b95ab8e15963efad3f8cab316ae5f48837afbb5cb825a0853a810e894d8e8a0226e71ff2c4952111ce42d6f2b4ddbc81a039284e2bbdc795caae70f06e22dd7671ff862be3b6854bc3cc613207f83f3"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x2f, &(0x7f00000031c0)=@string={0x2f, 0x3, "e6f194cf1a5cfa4aa65a2342440a889f45256b7a8d74ca6a6d00955f0ee343752b637fe5e6340d0a889e51af71"}}, {0x3b, &(0x7f0000003200)=@string={0x3b, 0x3, "751c507dbb05ce67f88ae8c00db0882218dd955a0361a6a02002a70b5efa5a0fd897d8001204522293b3d7e40b55edb30cdca32c3812b64a71"}}, {0xa5, &(0x7f0000003240)=@string={0xa5, 0x3, "a2d659d6c94e0fcb9cdabb2ec74844ad2ad2a1820d7df1e254a0f729d312d1ece3f72552242ec743ece5cda77343ece1efa85cfcd802c426eb53b73170135e35f9d70b2fbe66f5f39891c6bd2a50723e23915e91591902bab56d78b742746c40faaa57c02e9cfca2755a6e00e92980067877ed3aec77db6036ec79d07657e21b763202c232556545a81d687e8796a95b97ccc5a44417481cb1d1e8fae6dd1990ce2bd9"}}, {0x83, &(0x7f0000003300)=@string={0x83, 0x3, "3157a6f001cc9c4ffd812b642fe07af4150faaeed5d8604aec7befe507bf36a5010ac8b86becf726fec386a8962dbdac6a407234b8cd532d3f9969bf03cc82197e850a65e0393a6c85b2f0296b6cf201837a47ec83037c7225393ef9f35767c3e09b77a3d791da36f2fe6018c447884c82a15cbe921234e26bbf7a4b5931e6f4c5"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7, &(0x7f0000003400)=@string={0x7, 0x3, "e00fb976f4"}}]})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000003500)={'sit0\x00', &(0x7f00000034c0)={@remote, @local, 0x2, 0x1b}})
syz_open_dev$vim2m(&(0x7f0000003540), 0xffffffff, 0x2)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000003580)=0x8, 0x4)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f00000035c0), &(0x7f0000003600)=0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003680), 0x2, 0x0)
executing program 2:
ioperm(0x284, 0x7f, 0xe3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5411, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$userns(r3, &(0x7f0000000300))
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '12', ':', '2', ':', '1b', '.', 'd'}}, 0x15)
executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2003, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 12, 21, 3, 9, 5]
detailed listing:
executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x13, 0x2, 'H='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x109207, 0x0)
ioperm(0x9, 0x40, 0x101)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
executing program 3:
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
executing program 2:
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ae8178108612a41fb8650102030109022400"], 0x0)
socket(0x15, 0x5, 0x9)
memfd_create(&(0x7f0000000480)='!.\x00', 0x1)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000040)=0xc)
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 5]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 5]
detailed listing:
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)
executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0x55, "9c9404976c18a017569ee85e6ef821f2bd70c5277ecd8cac252a04a91c7573387611db431d8cd8126eb1d4c4b99552a538e5afc43164337e9f086bebf3ade4e935f8cf45b83dfefc74999b6b3f023826afce59d06f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x9}})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9]
detailed listing:
executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
minimized 3 calls -> 2 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r2, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r2, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
minimized 9 calls -> 2 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
bisect: concatenation succeeded
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
preadv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(0x0, 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, 0x0, 0x0, 0x2, 0x7e)

program did not crash
testing program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="210006"], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r1, &(0x7f00000025c0)=[{0x0}], 0x1, 0x2, 0x7e)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m32.355798092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
simplifying C reproducer
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program did not crash
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: BUG: corrupted list in az6007_i2c_xfer
a never seen crash title: BUG: corrupted list in az6007_i2c_xfer, ignore
testing compiled C program (duration=1m32.355798092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_open_dev$I2C-preadv
program crashed: UBSAN: array-index-out-of-bounds in az6007_i2c_xfer
reproducing took 1h8m42.46052343s
repro crashed as (corrupted=false):
usb read operation failed. (-71)
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in drivers/media/usb/dvb-usb-v2/az6007.c:821:30
index 4096 is out of range for type 'unsigned char [4096]'
CPU: 0 UID: 0 PID: 5832 Comm: syz-executor285 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_out_of_bounds+0x11c/0x160 lib/ubsan.c:453
 az6007_i2c_xfer+0x549/0xc30 drivers/media/usb/dvb-usb-v2/az6007.c:821
 __i2c_transfer+0x6b3/0x2190 drivers/i2c/i2c-core-base.c:2259
 i2c_transfer drivers/i2c/i2c-core-base.c:2315 [inline]
 i2c_transfer+0x1da/0x380 drivers/i2c/i2c-core-base.c:2291
 i2c_transfer_buffer_flags+0x10c/0x190 drivers/i2c/i2c-core-base.c:2343
 i2c_master_recv include/linux/i2c.h:79 [inline]
 i2cdev_read+0x111/0x280 drivers/i2c/i2c-dev.c:155
 do_loop_readv_writev fs/read_write.c:845 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_readv+0x6bc/0x8a0 fs/read_write.c:1018
 do_preadv+0x1af/0x270 fs/read_write.c:1130
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f52d2310929
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc40be7788 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007ffc40be77d0 RCX: 00007f52d2310929
RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 000000000000007e R09: 00007ffc40be77d0
R10: 0000000000000002 R11: 0000000000000246 R12: 00000000000f4240
R13: 00007ffc40be7a58 R14: 00007ffc40be77bc R15: 00007ffc40be77c0
 </TASK>
---[ end trace ]---

final repro crashed as (corrupted=false):
usb read operation failed. (-71)
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in drivers/media/usb/dvb-usb-v2/az6007.c:821:30
index 4096 is out of range for type 'unsigned char [4096]'
CPU: 0 UID: 0 PID: 5832 Comm: syz-executor285 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_out_of_bounds+0x11c/0x160 lib/ubsan.c:453
 az6007_i2c_xfer+0x549/0xc30 drivers/media/usb/dvb-usb-v2/az6007.c:821
 __i2c_transfer+0x6b3/0x2190 drivers/i2c/i2c-core-base.c:2259
 i2c_transfer drivers/i2c/i2c-core-base.c:2315 [inline]
 i2c_transfer+0x1da/0x380 drivers/i2c/i2c-core-base.c:2291
 i2c_transfer_buffer_flags+0x10c/0x190 drivers/i2c/i2c-core-base.c:2343
 i2c_master_recv include/linux/i2c.h:79 [inline]
 i2cdev_read+0x111/0x280 drivers/i2c/i2c-dev.c:155
 do_loop_readv_writev fs/read_write.c:845 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_readv+0x6bc/0x8a0 fs/read_write.c:1018
 do_preadv+0x1af/0x270 fs/read_write.c:1130
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f52d2310929
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc40be7788 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007ffc40be77d0 RCX: 00007f52d2310929
RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 000000000000007e R09: 00007ffc40be77d0
R10: 0000000000000002 R11: 0000000000000246 R12: 00000000000f4240
R13: 00007ffc40be7a58 R14: 00007ffc40be77bc R15: 00007ffc40be77c0
 </TASK>
---[ end trace ]---