Extracting prog: 10m46.543174086s
Minimizing prog: 28m47.958542773s
Simplifying prog options: 0s
Extracting C: 37.279905931s
Simplifying C: 13m14.534991308s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 5, 29, 40, 7, 12, 28, 30, 30, 24, 28, 5, 30, 6, 12, 4, 14, 10, 5, 30, 2, 30, 6, 30, 2, 2, 21, 6, 30, 9]
detailed listing:
executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x13}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0xfffe, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x2, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r11, 0x0, 0x0)
syz_ublk_setup_queues(r9, r7, &(0x7f00000001c0)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x100, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd05, 0x400, 0x2, 0x2b3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29aa, 0x1, 0x1, 0x392, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0x2, 0xd86, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d61737100000000140002800800024000000015080002400000000114000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="183b5197c7f0027d6d9108fb000a004e5756029cffb48e167132c70007040003800000000000000008000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
semget$private(0x0, 0x4000000009, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0xb}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6}, {0x2, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
executing program 1:
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="adbd9d50ce4cb8d090d5e8260cf36f4d09bba9c0c714723efe702dff4d238aeef249fd98b718ea1ac13ea4d3b9e6d79442faf480affb449e921206b4e71b0f72609614a4e384007f2761fc6f12d0207c32422514", 0x54}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="adbd9d50ce4cb8d090d5e8260cf36f4d09bba9c0c714723efe702dff4d238aeef249fd98b718ea1ac13ea4d3b9e6d79442faf480affb449e921206b4e71b0f72609614a4e384007f2761fc6f12d0207c32422514", 0x54}], 0x1)
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b0900000000000000ba74bcdbcd703893bb9f", 0x1c}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b0900000000000000ba74bcdbcd703893bb9f", 0x1c}], 0x1}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r3, 0x2285, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4) (async)
write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x2151, &(0x7f00000003c0)={0x0, 0x5d3b, 0x10000, 0x2, 0x1a5}, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000580)=<r8=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}}, 0x24}}, 0x800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}}, 0x24}}, 0x800)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) (async)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000300)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={<r10=>0x0}, &(0x7f0000000300)=0xc)
ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f00000005c0)) (async)
ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f00000005c0))
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xf9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x790, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x2d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000f8dbdf25170000000c00068008000680"], 0x20}, 0x1, 0x0, 0x0, 0x806}, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r11, 0x11a, 0x3, &(0x7f0000000000)=0x3f9, 0x4)
executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001300)={{r0}, "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"})
r1 = socket(0x10, 0x80003, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0x11, 0x2, 0x0)
bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (fail_nth: 5)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ipv4_delroute={0x5c, 0x19, 0x2, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x1, 0x0, 0x4, 0xfd, 0x6, 0xe00}, [@RTA_MULTIPATH={0xc, 0x9, {0xe000, 0x0, 0x9}}, @RTA_IP_PROTO={0x5, 0x1b, 0x10}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xe32}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0xf7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20040880)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="020000000010"], 0xfe44, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x94592000)
syz_io_uring_setup(0x2fbc, &(0x7f0000000000)={0x0, 0x3450, 0x10000, 0x3, 0x11a}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), &(0x7f0000000180))
r3 = mmap$IORING_OFF_PBUF_RING(0x0, 0x18, 0x6, 0x2010, 0xffffffffffffffff, 0x80bba1b3)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480))
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp6\x00')
lseek(r8, 0x1000000, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x1, 0x100, {<r10=>0x0}, {}, 0x5, 0x5})
syz_ublk_add_dev(r1, r2, r3, r7, &(0x7f00000002c0)={0x2e, 0x4, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0xe8c, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x10}}}, &(0x7f0000000340))
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ipv4_delroute={0x5c, 0x19, 0x2, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x1, 0x0, 0x4, 0xfd, 0x6, 0xe00}, [@RTA_MULTIPATH={0xc, 0x9, {0xe000, 0x0, 0x9}}, @RTA_IP_PROTO={0x5, 0x1b, 0x10}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xe32}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0xf7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20040880) (async)
creat(&(0x7f0000000080)='./bus\x00', 0x0) (async)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="020000000010"], 0xfe44, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x94592000) (async)
syz_io_uring_setup(0x2fbc, &(0x7f0000000000)={0x0, 0x3450, 0x10000, 0x3, 0x11a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async)
mmap$IORING_OFF_PBUF_RING(0x0, 0x18, 0x6, 0x2010, 0xffffffffffffffff, 0x80bba1b3) (async)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)) (async)
syz_open_procfs(0x0, &(0x7f0000000300)='net/udp6\x00') (async)
lseek(r8, 0x1000000, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x1, 0x100, {}, {}, 0x5, 0x5}) (async)
syz_ublk_add_dev(r1, r2, r3, r7, &(0x7f00000002c0)={0x2e, 0x4, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0xe8c, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x10}}}, &(0x7f0000000340)) (async)
executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10)
close(r2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r4, 0x80ad}], 0x1, 0x2)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7d, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @empty, 0x9d}}}, &(0x7f00000004c0)=0x84)
sendto$inet(r5, &(0x7f0000000380)="5dd9a79d60abb08e70b3f6c04682cf08d577fa5b4773e7042fd73830f5a48c422b979162f22e86cf0e6de94bd56d00ba354522f909a890249ab76d40b97a0b1c386e746e3c605de04504b9e896020ae45d49c328894b64818d1809ae8925c7114db94a6055ede679bea74d3cf6508bab55a45c78c9e60d7c12c22c4b8a3ad7bcee4a02374cdf88dba53f1bde97", 0x8d, 0x4004050, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0xfffffffc}, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='ufs\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
inotify_init()
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r6, &(0x7f000001a240)=""/102392, 0x18ff8, 0x100008)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'wg2\x00', 0x400})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=0x0], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
close(0x3)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e04, 0x101, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x10000}, 0x1c)
setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000401b00000000000000040000feff000000009d00000900000000000000fc27d0c32d72a481e3a413638191b90434167b95432abce10b8f361a635ac891609da5b30218e22e18f12e39eee6de0574f95ed5960380523dc2264c"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x94)
syz_usb_control_io$uac3(r0, &(0x7f0000000ac0)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050302000000932a7034f74da554ccc44b2ffef302"]}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x13}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0xfffe, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x2, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r11, 0x0, 0x0)
syz_ublk_setup_queues(r9, r7, &(0x7f00000001c0)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x100, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd05, 0x400, 0x2, 0x2b3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29aa, 0x1, 0x1, 0x392, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0x2, 0xd86, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})
executing program 4:
r0 = fsopen(0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
accept4(r2, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001400)=0x80, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r9, 0x8002, 0x7fff, 0x0, 0x2, [<r10=>0x0], [0x2], [0x800, 0x4, 0xfffffffe, 0x5e8]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, <r11=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11})
executing program 3:
syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102973c3408fd0b1100e6fa0102030109022c000108e73007090486"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x415e, 0x4)
sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24048011)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x44, &(0x7f0000000000)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1}, 0xfffffffe}], 0x1, 0x2002, 0x0)
executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140000001100010000000000000000ffff00000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
listen(r7, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000680)="bad0a5b3", 0x4, 0xd0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe)
shutdown(r0, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x46a, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) (fail_nth: 7)
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x882, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}})
executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x400, 0xf5, @dev={0xfe, 0x80, '\x00', 0x40}}}}}}}, 0x0)
executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xb59, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57c, 0x306, 0x3, 0xfffffffa, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0)
write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00\x002\x00c'], 0x38)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
executing program 4:
r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x40, 0xf0, 0xf8, 0x0, 0x0, 0x7, 0x10003}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303000000000000008e000200000f0800010001"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="43a00000000000001c0012800900010069c92dd87c4f00959159c57170697000", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0xc054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x2000000, 0x50172, 0xffffffffffffffff, 0x0)
r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r7)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000280)=@keyring)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r7)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000030000f5ffffffffffffff00000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000020000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xec}}, 0x0)
executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x101e00)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x3, 0x6, 0x7, 0x8000, 'syz1\x00', 0x5}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0xfffffffb, 0xe1a, 0x5}, 0x10) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 64)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64)
ioctl$XFS_IOC_FSGROWFSRT(r3, 0x400c5870, &(0x7f0000000240)={0x515c, 0xd}) (async)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2, 0x4}) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000480)) (async, rerun: 32)
r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) (async)
ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0xb}) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (rerun: 64)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async, rerun: 64)
unshare(0x2a060400) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) (async, rerun: 64)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000340)={0x8001, 0x80000, <r6=>r5}) (rerun: 64)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000400)}, 0x10) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x8) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4)
executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r1=>0x0, 0xf4b8, 0x3, 0x5cb80, 0x1, 0x81}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x2)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, <r9=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, <r13=>0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r12}, <r14=>0xffffffffffffffff}, {0x0, 0x0, <r15=>0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r12}, <r16=>0xffffffffffffffff}, {0x0, 0x0, <r17=>0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
r18 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8)
mlock(&(0x7f0000000000/0x4000)=nil, 0x4000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x20c5, {0xee9b, 0xffff9577, 0x0, {0x5, 0x7, 0x4, 0xd0d, 0x6, 0x70000000000, 0x6, 0x1, 0xe, 0x2000, 0xffff, 0x0, 0x0, 0x6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r19 = getegid()
r20 = openat$cgroup_subtree(r12, &(0x7f00000008c0), 0x2, 0x0)
r21 = socket$igmp(0x2, 0x3, 0x2)
r22 = syz_open_dev$dmmidi(&(0x7f0000000900), 0x6, 0x400000)
r23 = openat$dlm_plock(0xffffff9c, &(0x7f0000000940), 0x2080, 0x0)
sendmsg$unix(r18, &(0x7f0000000a40)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="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", 0xfa}], 0x1, &(0x7f0000000980)=[@cred={{0x18, 0x1, 0x2, {r1, 0x0, r19}}}, @rights={{0x1c, 0x1, 0x1, [r5, r20, r2, r3]}}, @rights={{0x24, 0x1, 0x1, [r9, r21, r22, r15, r18, r11]}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r9, r23, r16, r17, r13, r2]}}, @rights={{0x20, 0x1, 0x1, [r14, r14, r14, r4, r5]}}], 0xa4, 0x40000}, 0x8080)
syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x4000000, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20068801}, 0x104)
executing program 1:
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/uts\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r0, 0x4b3d, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f00000000c0), 0x2000000, &(0x7f0000ff1000/0xe000)=nil, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007"], 0x5c}}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000020000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67520800fd40f78d2cfe07000000a55ba13cc01812c4dae4162e43ac61b7ad33", [0x14, 0x7fffffff]}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000030000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
executing program 2:
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x9, 0x2, 0x40}}, 0xa)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x80000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{<r1=>0x0}]})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1})
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r0, 0xc0106440, &(0x7f0000000180)={0x1, 0x6, &(0x7f0000000140)})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x91}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffd291}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x25)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc008641d, &(0x7f00000003c0)={r1, &(0x7f0000000340)=""/120})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400)="eecf915efcbc8854648b594bd9031d275a508116314cdcfcbeab402ed9f60875f86fd5b51a7fb65b34db96e80befc53b4bd13641eb96d0247aac97a3e46478b22d35bee14c4a7150ac65268d3d184a6ecc6df59b7941da1a1e970241bc495486caa16a691b7e8461d27b4d84f37da127c04328409169773fe0a8ffadb0e49b1ea693e6cc90677b1d65d76ecf8dce6cfe08948c7182c7aa10a87eb95c42c687cf2144548850f66a3bcae0464ac7b386e7cb538926c90c54c654a4a7381fe461582933bea971ab05decf7478558113f51d9c373f5030f19620d4d86bed99a5572133d5fd821e3362", 0xe7, r2}, 0x64)
r4 = dup2(r0, r0)
ioctl$KVM_NMI(r4, 0xae9a)
syz_usb_connect(0x2, 0x518, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x3f, 0xf2, 0x72, 0xdf, 0x83a, 0xa703, 0x116a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x506, 0x2, 0x3, 0x7, 0x20, 0x6, "", [{{0x9, 0x4, 0x89, 0x3, 0xc, 0x8c, 0x35, 0xeb, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xde, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0xf9d, 0x4, 0xee}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfe, 0xc, '-N'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1ff, 0x8001, 0x70, "3290d6fbd2"}]}], [{{0x9, 0x5, 0x5, 0x1, 0x0, 0x0, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcc, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x8, 0x1, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xb, 0x35}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x18, 0xf5, 0xa, [@generic={0xfa, 0x1, "7d505dcd1ec4b83dae4b6e2a7b54c7e626bb3b389885e0da8d0d37f49540083e3df2e85e8bdb1af4c164d0dd78e9369a92e2d47d7e3d263a2eabd5d94534af6982d1338c09341c2c86e8da55176d90b03c6b64f2bd3aec2eaf80ae9a0dabf593d43a601852702ef1ba15e021bbd7847df49240cdde7268e17da93ff14de998d2bdd95888d46b39401e98738ee0cfc8a8e781cf757f718a7334935106a23f777b8ad0e2bbb6612c9cf6aeb96238fa2f686519d5cc898eb9df83f479d24e08180d4023cb1cc8ccba6767ad81e8663d4f32a22300d3c51b0aa263886ddff481720423580ce7a26dddb235b5f422a10fae5705bc86913b039fee"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x5, 0x9, 0x4, [@generic={0x64, 0x1, "598e701f1651262c3071a8282145269124c5b4414b6cb4ff6f34a9e012f54e991d2c5ff3862ef88fd79c0cd7c1546e6e57c2a91c5b619d2be0d8105677510a9df5dadab8733aff1171e6c2774646e4345739f3e3a0a7b8a13bbec73bd75ddea717d7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa9, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6, 0x4, 0x6, [@generic={0x83, 0x2, "9e12701f5acecd2006b0d86099e62f133aa13eb5b556207426e4228d0bca238a78c543b5e45c19af740585498e13344b37b601734a367355a4c32d71a2809daef152e6a517869ef3fa10031aa182b3872a2e7d661ebe2d7fc7fd6e9d73aeaa4cf9766d22f949595732023d5c7f3970f2f2d51d5f18ef2e32298a1a5501b7ef0f4b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xe81b}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0xa4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x62be71201622b79b, 0x9, 0x9}]}}, {{0x9, 0x5, 0xe, 0x1c, 0x8, 0x35, 0x3, 0x9, [@generic={0x6e, 0x3, "dc231132b3b0d5826fdbf05728d48dd231e6ab7f72213e4ff76aee40baa20697b796d0f6823493dc0762ccccfc170d224b821c0e6c3084e8b5241ebc1cf40313df9e8342bfb5e5e018f8c1c3a823dc266cddb788d33d00209707b2d404bbadb79293973ceb47bc38a7816217"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x33, 0x7, 0x90, [@generic={0x12, 0x1, "c2b4f9475c4381c3217b610a47c3b343"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xe1, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd, 0x0, 0x1}}]}}, {{0x9, 0x4, 0xee, 0x0, 0x5, 0x6d, 0x31, 0x71, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x7f, 0x3, 0xff, [@generic={0xa0, 0x30, "46aef99b2d9e82c6aedd1cd916fe191c382a7bfeaed222ea1b2321e2e86c6886e9e5fbb828834d5c4d8f20e9b9ad5f77de55f61050c18687a585c1ef968b378655f443b1f8f8a0980317f54ff54849ed5d5f6ea15b348c2d3ad07678a8bb9aed06c5862b98e3f7fe11b3d6644398c277d340590d6a3c90225f8f9dc368f5089b4649193b34d231afa42b2f64f1fabeeef034c045cae0f572ccc85a81b4e5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0xfffa}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x3bf, 0x1, 0x3, 0x23}}, {{0x9, 0x5, 0xd, 0x10, 0xb62ba065f52a37db, 0x83, 0x9, 0x6}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x9, 0x5, 0x2, [@generic={0xfe, 0x4, "972b72bb4e9ef9933a7fc0d9f9f97af172502cccb34b91fc0ccae01228b3d865ec4018ae5c3257f3d5420baaa894433a1ce7395b3a0aafade5c63ecb22f03b76032701894448f3c1fbc5ca071d8bae3b50b69f14f315c6b602c6db822db82072062b0038453cb50aa1207ddcd94669b042e7a6356a51e2c2f88837a935ad6d68c62df83b707f2d603845d3c29f1e6659cc90e87dd7d58ad23a0d9e40a397bd60d6753fabbc440eda2a52e84a2d16798f88306bd762155b5d54439eb60b6b4b13b06a7ed36ea7e3f97c28abd45966bde873f99b2b356d5593dec3807450c3f2fe67b8d91e0ec3345da92ceb301215c901cbe70f300d121f98316f1590"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf8, 0x8}]}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0xb2, 0xa8, 0x95, 0x10, 0x7d}, 0x42, &(0x7f0000000b00)={0x5, 0xf, 0x42, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xb9, 0xf8, 0xe410}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x6, 0x9}, @generic={0x7, 0x10, 0x4, "30ae39ce"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x5, 0xf000, 0x7f, [0x0, 0xff3e8f, 0x30, 0x0]}, @ptm_cap={0x3}]}, 0x4, [{0x91, &(0x7f0000000b80)=@string={0x91, 0x3, "c9acaa98fd719e9e3bd678eb0ecd7cfe44ed17d8c6337332813980073f2a0485057c8a96b76f96af477b952d508719bf02eb6226b148cf5856545f7983b90e27f1aa64b9a01e5225e13711c138be97199f63e1b324821823b5603c5c68eae2f017c4ed7089233dc418ca2fee998615bbe160baa6f9655bee3d45ad670ab727ec6ac63835100c4a4474656cb08ab6b2"}}, {0x53, &(0x7f0000000c40)=@string={0x53, 0x3, "fa018ea28350671457134ae13ebab5fd0d869e4a0d9885441a52ef9edd9f7bffa8f29be6da4f6636629ab4dcd8820ff7653c94467fb32ba26fab529c9fdedbf064a9974d10c774fef7949409ef4a61e654"}}, {0x36, &(0x7f0000000cc0)=@string={0x36, 0x3, "3c57347743ebe14dcac92860ddb2ec54c28e7196f3db060999ffb66a2f70735564b245813bbade86f1b87328c386e968ecf17b97"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x429}}]})
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8054}, 0x240000e1)
ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000ec0)={r0, 0x0, 0x60e6b9f7, 0x3, 0xd3, 0xf, [0x1, 0x2f6, 0x7fffffffffffffff, 0x6, 0x3, 0x66f]})
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000f40)=0x1, 0x4)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001140)={0x1, 0x0, &(0x7f0000000f80)=""/56, &(0x7f0000000fc0)=""/141, &(0x7f0000001080)=""/161, 0x10000})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000001180)={0x2, 0xfffffffffffffffe})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0xd, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x9, 0x3}, {0x5, 0x3}, {0xed, 0x3}, {0xff, 0x6}, {0x1, 0x7}], "3306e52e1d0f6168"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x4}, {0x80, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0xc, 0x1}, {0xff, 0x4}, {0x99, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0xfe, 0x6}, {0x7, 0x7f}, {0x9, 0x3}, {0x7a, 0x1}], "175409c494add1b3"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000001340)={0x3, 0x0, 0x2014, 0x7, 0x6, {0x8000, 0xffffffff}, 0x1})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), r4)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001400)={0x170, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x12d8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5f}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x41}, 0x840)
syz_usb_connect$uac2(0x5, 0xaa, &(0x7f0000001600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x9, 0x20, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x65}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xa, 0x29, 0x1}, [@effect_unit={0x11, 0x24, 0x7, 0x6, 0x4, 0x4, [0x2, 0x3, 0x1, 0x0, 0x2]}, @processing_unit={0xf, 0x24, 0x8, 0x2, 0x5, [0x2, 0x0, 0x1, 0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xe, 0xae, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0xf9, 0x6afb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xf7, 0x7, 0x1, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xfd, 0x0, {0x8, 0x25, 0x1, 0x80, 0x30, 0xd, 0x80}}}}}}}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x250, 0x7, 0x1, 0x4, 0x40, 0x2}, 0x51, &(0x7f0000001700)={0x5, 0xf, 0x51, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x5, 0xf00f, 0x9, [0xc0cf, 0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "25df395847a1fbbc3126f3faa18e478d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x4, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x8, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4, 0x6, 0x4bcc, 0x81}]}, 0x3, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x100a}}, {0xb7, &(0x7f00000017c0)=@string={0xb7, 0x3, "59a483d85f8b9bf4a04d20a130b0e6bc34109fe0eb36087dc0f718a48133bf416ee81284294a036d3fbad13bfb1c1239d2d825c0c9635874adefc6f45b3643fc7de4dac08079977b0e18ce07e65b41a7fc5d91e206ce7f026b55819bedc31f2713fc418d2615bd7cc3e56a55f93f2f7d23d7b01f27848f662ea96da19f67abe2da57221a2474a4764bb0b7b514d7a93bfa6969dc13eac22ee26263d2460ee9e8902b05c24a6ae47cbf00b01a865c453cf0e1655df1"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x166c}}]})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x4040)
syz_emit_vhci(&(0x7f0000001a40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xcf}, @l2cap_cid_signaling={{0xcb}, [@l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x200, 0x8}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x7f, 0x5, 0x9}}, @l2cap_create_chan_req={{0xc, 0xc, 0x5}, {0x1, 0x101, 0x10}}, @l2cap_conf_req={{0x4, 0x3, 0x13}, {0x1, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_mtu={0x1, 0x2, 0x480}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_info_rsp={{0xb, 0xf5, 0x1f}, {0x7f, 0x43, "1e1c25c6379bb540f4a5fd30b8d602edff3c696705a7014fa5a747"}}, @l2cap_conf_req={{0x4, 0x0, 0xf}, {0x0, 0x4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0xaac, 0x2}}, @l2cap_conf_rsp={{0x5, 0x9, 0x23}, {0xfff7, 0xd, 0x5106, [@l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x9, 0x0, 0xb, 0xb2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}]}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0xfffb}}, @l2cap_conf_rsp={{0x5, 0x4, 0x2b}, {0x400, 0xd8, 0x5, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x81, 0x0, 0x2, 0xdb52, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0xa00}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xa3, 0x8, 0x2, 0x13, 0x9}}]}}]}}, 0xd4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r4)
r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000001b80), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000001bc0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "a3c74a", "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"}}, 0x110)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-syz_open_dev$dvb_demux
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-setsockopt$inet_tcp_TCP_CONGESTION-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_connect$uac3-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x1, 0xf0, 0xaa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x319615cfd29efd9e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x1, 0x5, 0xf, 0x0, 0x9, 0x7, 0x80}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x81, 0x6, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x97, 0x0, '{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x401, 0x0, 0xf9}, @as_header={0x17, 0x24, 0x1, 0xe, 0x7c, 0x7, 0x2, 0x6, 0x7, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x10, {0xa, 0x25, 0x25, 0x8, 0xd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x4, 0xf2, 0x7, 0x3, 0x8, 0x7, 0x1292, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x20, 0x0, 0x7, {0xa, 0x25, 0x25, 0xb8a, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0x40, 0xc}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x7, 0x1, 0x1, 0x2b}]}, 0x1, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="71034b5289833135a52e537f5bf4ae6cbc247ed022c8ad9483c19c8f53c053ace268eea67704589ec9101ac7593d559d6ec7f8424b49b4f9d6ae70aedfe6f0563e965991a377dffb18cc27bf6f91594620d0cfcad4aad5b5c484b1f212b20a0ffd5c67776169cc9fd7a1fd"]}]})
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00010029bd700000000040022020000000de"], 0x1c}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(0x0, 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program did not crash
testing program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m19.504270896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
simplifying C reproducer
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing compiled C program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
program crashed: WARNING in ttusb_start_feed/usb_submit_urb
testing program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
testing program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
testing program (duration=1m19.504270896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER
detailed listing:
executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4})

program crashed: WARNING in ttusb_start_feed/usb_submit_urb
validation run: crashed=true
reproducing took 58m7.331146325s
repro crashed as (corrupted=false):
usb 1-1: BOGUS urb xfer, pipe 0 != type 1
------------[ cut here ]------------
usb 1-1: BOGUS urb flags, 202 --> 200
WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0 drivers/usb/core/urb.c:532, CPU#0: syz.0.17/5838
Modules linked in:
CPU: 0 UID: 0 PID: 5838 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_submit_urb+0xd28/0x18b0 drivers/usb/core/urb.c:532
Code: e8 7d 79 c9 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 80 2b b0 8f e8 9f
RSP: 0018:ffffc9000395f918 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8880308f2000 RCX: 0000000000000202
RDX: ffff88807e689280 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfb0
RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff1100611e40b
R13: ffff88807e689280 R14: ffff888031bba100 R15: 0000000000000200
FS:  0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:0000000057d95480
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 000055af9ae48058 CR3: 0000000078e3c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ttusb_start_iso_xfer drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:829 [inline]
 ttusb_start_feed+0xe19/0x1770 drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:899
 dmx_ts_feed_start_filtering+0x129/0x220 drivers/media/dvb-core/dvb_demux.c:747
 dvb_dmxdev_start_feed drivers/media/dvb-core/dmxdev.c:658 [inline]
 dvb_dmxdev_filter_start+0x434/0x10d0 drivers/media/dvb-core/dmxdev.c:769
 dvb_demux_do_ioctl+0x48b/0x540 drivers/media/dvb-core/dmxdev.c:1099
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1208
 __do_compat_sys_ioctl fs/ioctl.c:695 [inline]
 __se_compat_sys_ioctl fs/ioctl.c:638 [inline]
 __ia32_compat_sys_ioctl+0x5ea/0x950 fs/ioctl.c:638
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x27a/0x6a0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf706f0ec
Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
RSP: 002b:00000000ffb07a2c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040146f2c
RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 7d 79 c9 fa       	call   0xfac97982
   5:	4c 89 f7             	mov    %r14,%rdi
   8:	4d 8b 6d 00          	mov    0x0(%r13),%r13
   c:	41 0f b6 04 2c       	movzbl (%r12,%rbp,1),%eax
  11:	84 c0                	test   %al,%al
  13:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  18:	0f 85 97 07 00 00    	jne    0x7b5
  1e:	8b 0a                	mov    (%rdx),%ecx
  20:	48 8b 34 24          	mov    (%rsp),%rsi
  24:	4c 89 ea             	mov    %r13,%rdx
  27:	45 89 f8             	mov    %r15d,%r8d
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	4c 8b 6c 24 08       	mov    0x8(%rsp),%r13
  34:	4c 89 ef             	mov    %r13,%rdi
  37:	48 c7 c6 80 2b b0 8f 	mov    $0xffffffff8fb02b80,%rsi
  3e:	e8                   	.byte 0xe8
  3f:	9f                   	lahf

final repro crashed as (corrupted=false):
usb 1-1: BOGUS urb xfer, pipe 0 != type 1
------------[ cut here ]------------
usb 1-1: BOGUS urb flags, 202 --> 200
WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0 drivers/usb/core/urb.c:532, CPU#0: syz.0.17/5838
Modules linked in:
CPU: 0 UID: 0 PID: 5838 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:usb_submit_urb+0xd28/0x18b0 drivers/usb/core/urb.c:532
Code: e8 7d 79 c9 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 80 2b b0 8f e8 9f
RSP: 0018:ffffc9000395f918 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8880308f2000 RCX: 0000000000000202
RDX: ffff88807e689280 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfb0
RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff1100611e40b
R13: ffff88807e689280 R14: ffff888031bba100 R15: 0000000000000200
FS:  0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:0000000057d95480
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 000055af9ae48058 CR3: 0000000078e3c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ttusb_start_iso_xfer drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:829 [inline]
 ttusb_start_feed+0xe19/0x1770 drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c:899
 dmx_ts_feed_start_filtering+0x129/0x220 drivers/media/dvb-core/dvb_demux.c:747
 dvb_dmxdev_start_feed drivers/media/dvb-core/dmxdev.c:658 [inline]
 dvb_dmxdev_filter_start+0x434/0x10d0 drivers/media/dvb-core/dmxdev.c:769
 dvb_demux_do_ioctl+0x48b/0x540 drivers/media/dvb-core/dmxdev.c:1099
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1208
 __do_compat_sys_ioctl fs/ioctl.c:695 [inline]
 __se_compat_sys_ioctl fs/ioctl.c:638 [inline]
 __ia32_compat_sys_ioctl+0x5ea/0x950 fs/ioctl.c:638
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x27a/0x6a0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf706f0ec
Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
RSP: 002b:00000000ffb07a2c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040146f2c
RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 7d 79 c9 fa       	call   0xfac97982
   5:	4c 89 f7             	mov    %r14,%rdi
   8:	4d 8b 6d 00          	mov    0x0(%r13),%r13
   c:	41 0f b6 04 2c       	movzbl (%r12,%rbp,1),%eax
  11:	84 c0                	test   %al,%al
  13:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  18:	0f 85 97 07 00 00    	jne    0x7b5
  1e:	8b 0a                	mov    (%rdx),%ecx
  20:	48 8b 34 24          	mov    (%rsp),%rsi
  24:	4c 89 ea             	mov    %r13,%rdx
  27:	45 89 f8             	mov    %r15d,%r8d
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	4c 8b 6c 24 08       	mov    0x8(%rsp),%r13
  34:	4c 89 ef             	mov    %r13,%rdi
  37:	48 c7 c6 80 2b b0 8f 	mov    $0xffffffff8fb02b80,%rsi
  3e:	e8                   	.byte 0xe8
  3f:	9f                   	lahf