Extracting prog: 34m58.875376698s Minimizing prog: 41m5.037593294s Simplifying prog options: 0s Extracting C: 41.723227955s Simplifying C: 12m13.253422351s extracting reproducer from 25 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) program did not crash program did not crash single: failed to extract reproducer bisect: bisecting 25 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 4, 28, 28, 11, 14, 1, 16, 21, 27, 16, 1, 17, 4, 15, 25, 5, 6, 19, 13, 21, 5, 5, 17] detailed listing: executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x405, &(0x7f0000000000)={0x0}) executing program 0: r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) socket$key(0xf, 0x3, 0x2) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x8) gettid() syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x12, 0x2, 0xef, 0x7ff, 0x4}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101000000090400021202060000052406000005240000000d240f01000000000000000000090581032000ff01010905820200020003000905030201"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) executing program 1: mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) socket(0x15, 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002940)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) landlock_restrict_self(0xffffffffffffffff, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) writev(r4, &(0x7f00000000c0), 0x0) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x4, 0x1, 0x91b3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x24, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x102a, &(0x7f0000000140)={0x0, 0xe341, 0x13500, 0x1, 0xffffffff}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) poll(&(0x7f00000002c0)=[{r1, 0x5002}], 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, 0x0, 0x0, 0x40880d1) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000"], 0x34}}, 0x0) executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 3: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x2b4, 0xffffffff, 0xffffffff, 0x384, 0x384, 0x384, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1c0, 0x1e4, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'wlan1\x00', {0x8000000000007ff, 0x40000298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}]}, @REJECT={0x24}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xffffffff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x0, 0x6, 0x2], 0x3, 0x2}, {0x1, [0x4, 0x1, 0x4, 0x1, 0x1, 0x3], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x474) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@private=0xe1010203, @empty, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000500)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregset(0x4205, r10, 0x201, &(0x7f0000001b80)={&(0x7f0000001a80)="b2567747baee0b887811538455476f65fc4b6ebefd7bc506b7d57553e7eb7f3b8893f3b00a2b914257ce45f73cd31e12a637f7fe37ba02805d3dcb7a61f15502fa1d5d5c7ed3f6d4c624b9edb5cabeac002467cc5ccb254a2ee17a8aaa0df721849068d88191ae671f1883b839da4bf796379507c75f1af921101225c2f9e42a7e70e639cec1f850554f96e99b9378ddd91a064b4beae86848eddd6eb221942b4e8de309301c0a9574cd6cadfc1eabc336455a1cf2e0c025259234044b349739884bc4fb90bca09798671b7b", 0xcc}) r11 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) r12 = fanotify_init(0x200, 0x0) fanotify_mark(r12, 0x1, 0x40000030, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = dup(r14) syz_usb_control_io(r13, 0x0, 0x0) write$UHID_INPUT(r15, &(0x7f00000005c0)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44381d31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b51df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1010}}, 0x1006) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 25 programs bisect: split chunks (needed=false): <24> bisect: split chunk #0 of len 24 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 17, 4, 15, 25, 5, 6, 19, 13, 21, 5, 5, 17] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 3: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x2b4, 0xffffffff, 0xffffffff, 0x384, 0x384, 0x384, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1c0, 0x1e4, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'wlan1\x00', {0x8000000000007ff, 0x40000298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}]}, @REJECT={0x24}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xffffffff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x0, 0x6, 0x2], 0x3, 0x2}, {0x1, [0x4, 0x1, 0x4, 0x1, 0x1, 0x3], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x474) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@private=0xe1010203, @empty, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000500)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregset(0x4205, r10, 0x201, &(0x7f0000001b80)={&(0x7f0000001a80)="b2567747baee0b887811538455476f65fc4b6ebefd7bc506b7d57553e7eb7f3b8893f3b00a2b914257ce45f73cd31e12a637f7fe37ba02805d3dcb7a61f15502fa1d5d5c7ed3f6d4c624b9edb5cabeac002467cc5ccb254a2ee17a8aaa0df721849068d88191ae671f1883b839da4bf796379507c75f1af921101225c2f9e42a7e70e639cec1f850554f96e99b9378ddd91a064b4beae86848eddd6eb221942b4e8de309301c0a9574cd6cadfc1eabc336455a1cf2e0c025259234044b349739884bc4fb90bca09798671b7b", 0xcc}) r11 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) r12 = fanotify_init(0x200, 0x0) fanotify_mark(r12, 0x1, 0x40000030, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = dup(r14) syz_usb_control_io(r13, 0x0, 0x0) write$UHID_INPUT(r15, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 5, 6, 19, 13, 21, 5, 5, 17] detailed listing: executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 17, 4, 15, 25] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 3: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x2b4, 0xffffffff, 0xffffffff, 0x384, 0x384, 0x384, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1c0, 0x1e4, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'wlan1\x00', {0x8000000000007ff, 0x40000298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}]}, @REJECT={0x24}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xffffffff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x0, 0x6, 0x2], 0x3, 0x2}, {0x1, [0x4, 0x1, 0x4, 0x1, 0x1, 0x3], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x474) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@private=0xe1010203, @empty, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000500)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregset(0x4205, r10, 0x201, &(0x7f0000001b80)={&(0x7f0000001a80)="b2567747baee0b887811538455476f65fc4b6ebefd7bc506b7d57553e7eb7f3b8893f3b00a2b914257ce45f73cd31e12a637f7fe37ba02805d3dcb7a61f15502fa1d5d5c7ed3f6d4c624b9edb5cabeac002467cc5ccb254a2ee17a8aaa0df721849068d88191ae671f1883b839da4bf796379507c75f1af921101225c2f9e42a7e70e639cec1f850554f96e99b9378ddd91a064b4beae86848eddd6eb221942b4e8de309301c0a9574cd6cadfc1eabc336455a1cf2e0c025259234044b349739884bc4fb90bca09798671b7b", 0xcc}) r11 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) r12 = fanotify_init(0x200, 0x0) fanotify_mark(r12, 0x1, 0x40000030, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = dup(r14) syz_usb_control_io(r13, 0x0, 0x0) write$UHID_INPUT(r15, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) program did not crash bisect: split chunks (needed=true): <8>, <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 17, 4, 15, 25, 5, 6, 19, 13, 21, 5, 5, 17] detailed listing: executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 3: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x2b4, 0xffffffff, 0xffffffff, 0x384, 0x384, 0x384, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1c0, 0x1e4, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'wlan1\x00', {0x8000000000007ff, 0x40000298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}]}, @REJECT={0x24}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xffffffff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x0, 0x6, 0x2], 0x3, 0x2}, {0x1, [0x4, 0x1, 0x4, 0x1, 0x1, 0x3], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x474) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@private=0xe1010203, @empty, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000500)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregset(0x4205, r10, 0x201, &(0x7f0000001b80)={&(0x7f0000001a80)="b2567747baee0b887811538455476f65fc4b6ebefd7bc506b7d57553e7eb7f3b8893f3b00a2b914257ce45f73cd31e12a637f7fe37ba02805d3dcb7a61f15502fa1d5d5c7ed3f6d4c624b9edb5cabeac002467cc5ccb254a2ee17a8aaa0df721849068d88191ae671f1883b839da4bf796379507c75f1af921101225c2f9e42a7e70e639cec1f850554f96e99b9378ddd91a064b4beae86848eddd6eb221942b4e8de309301c0a9574cd6cadfc1eabc336455a1cf2e0c025259234044b349739884bc4fb90bca09798671b7b", 0xcc}) r11 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) r12 = fanotify_init(0x200, 0x0) fanotify_mark(r12, 0x1, 0x40000030, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = dup(r14) syz_usb_control_io(r13, 0x0, 0x0) write$UHID_INPUT(r15, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 6, 19, 13, 21, 5, 5, 17] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunk #1 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 21, 5, 5, 17] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x278, 0x148, 0x148, 0x148, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0), 0x400000000000354, 0x42, 0x0) executing program 2: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <4>, <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 16, 1, 5, 6, 19, 13] detailed listing: executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 16, 5, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 6] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) program did not crash bisect: split chunks (needed=true): <2>, <2>, <2>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 27, 16, 1, 5, 6, 19, 13] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 27, 16, 1, 5, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 16, 1, 5, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 5, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: split chunk #2 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 6, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 19, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: split chunk #3 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 6, 13] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x8, 0x26, 0x10, 0xa5c, 0x396e, 0x21b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0xe4, 0xef, 0x3, 0xff, 0x1, 0x1, 0x5, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x3, 0x98, [@generic={0x7, 0x5, "0416ce2b60"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x8, 0x6, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 21, 27, 16, 1, 5, 6, 19] detailed listing: executing program 2: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0x2020) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010322bd7002fadbdf2514000000b2500bbd4c912c559818b5521adff1930f89736e41268a7969a85ff1efd5ec5c22feda6d89064577af1f9f312244f8b2231c77370d042c947691bdadd63f8139734f94ff457d6f4a5d2fbf461a4880b78dbfb2fab4cfd87084"], 0x14}}, 0xc004) close(0x3) unshare(0x42000000) executing program 0: mkdir(&(0x7f0000000280)='./cgroup/../file0\x00', 0x130) msgctl$IPC_RMID(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x0) pread64(r3, 0x0, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000f40)=""/161, 0xa1}, {&(0x7f0000000d40)=""/19, 0x13}], 0x4, &(0x7f0000000000)=""/43, 0x2b}, 0x8000}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_connect) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x4, 0x8b, 0x7}, 0x1d, [0x80eb, 0xc95a, 0x3, 0x9, 0x80, 0x2, 0x5, 0x10007f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0xfffffffe, 0x1948, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x401, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x7, 0x1000007, 0x5, 0x0, 0xffffffff, 0x312, 0x81, 0xea4, 0x1ba, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x2005, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x1, 0x800, 0x6, 0x161c5991, 0x8002, 0x1, 0xfe000000, 0xb4c5, 0x4, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0xb, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x100, 0x5, 0x0, 0x1ef, 0x1, 0x200008, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0xfffffffe, 0x6d02, 0x1, 0x2, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x2, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x5, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xffff, 0x8024, 0x7ffe, 0x80000001, 0x200a620, 0x3, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xedf, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x5, 0x2, 0x5, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x6d5, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f0000000bc0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cpu.weight.nice\x00', 0x2, 0x0) executing program 4: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x6e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001800), 0x56) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000007c0)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000800)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b000100"], 0x0) executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) program did not crash bisect: too many guilty chunks, aborting single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2-ioctl$EVIOCSKEYCODE_V2 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect-ioctl$EVIOCSKEYCODE_V2 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev-ioctl$EVIOCGMASK detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev-syz_open_dev$evdev detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer-syz_open_dev$evdev detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$evdev(0x0, 0x3, 0x143080) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=1m26.968865502s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host simplifying C reproducer testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.968865502s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true reproducing took 1h34m40.778719841s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/0/0: 1, last CPU#0: #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [] schedule_preempt_disabled+0x1d/0x30 kernel/sched/core.c:7434 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 RAX: 000000000012b475 RBX: ffffffff819bf590 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8fa00000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#0: swapper/0/0 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: ff 06 cc 41 ff c7 44 89 3d e9 72 e7 16 48 c7 c1 80 d8 6d 8c 48 c7 c7 e0 d8 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 1a 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 41 6c 0b 3b 05 7f RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: c8d668909e4e5a00 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffff110170848e2 R10: dffffc0000000000 R11: ffffed10170848e3 R12: ffff888020bfdd38 R13: ffff88807e29bb98 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123abb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f7f9a190 CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 RAX: 000000000012b475 RBX: ffffffff819bf590 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 4b 8a 02 rex.WXB mov (%r10),%al 3: c3 ret 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 33 05 20 00 verw 0x200533(%rip) # 0x20055b 28: fb sti 29: f4 hlt * 2a: e9 cc 0c 03 00 jmp 0x30cfb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/0/0: 1, last CPU#0: #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [] schedule_preempt_disabled+0x1d/0x30 kernel/sched/core.c:7434 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 RAX: 000000000012b475 RBX: ffffffff819bf590 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8fa00000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#0: swapper/0/0 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: ff 06 cc 41 ff c7 44 89 3d e9 72 e7 16 48 c7 c1 80 d8 6d 8c 48 c7 c7 e0 d8 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 1a 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 41 6c 0b 3b 05 7f RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: c8d668909e4e5a00 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffff110170848e2 R10: dffffc0000000000 R11: ffffed10170848e3 R12: ffff888020bfdd38 R13: ffff88807e29bb98 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123abb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f7f9a190 CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 RAX: 000000000012b475 RBX: ffffffff819bf590 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 4b 8a 02 rex.WXB mov (%r10),%al 3: c3 ret 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 33 05 20 00 verw 0x200533(%rip) # 0x20055b 28: fb sti 29: f4 hlt * 2a: e9 cc 0c 03 00 jmp 0x30cfb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop