Extracting prog: 39m45.705576443s Minimizing prog: 41m52.55583252s Simplifying prog options: 0s Extracting C: 1m32.328335725s Simplifying C: 17m24.266340133s extracting reproducer from 14 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-syz_open_dev$video4linux-prctl$PR_SCHED_CORE-sched_setattr-openat$ttyS3-bpf$PROG_LOAD-sendmmsg$inet6-shutdown-setsockopt$inet_sctp6_SCTP_PR_SUPPORTED-close-ioctl$SNDRV_TIMER_IOCTL_INFO-socket$inet6_tcp-close-socket-listen-socket$inet_smc-setsockopt$inet_IP_IPSEC_POLICY-accept4$unix-socket$inet_mptcp-connect$inet-getpid-socket$inet6_sctp-syz_open_dev$vim2m-syz_open_dev$vbi-fcntl$dupfd detailed listing: executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_MM_MAP-bpf$BPF_GET_MAP_INFO-ioctl$KVM_GET_SUPPORTED_CPUID-pipe2-pipe2-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$rdma_cm-write$RDMA_USER_CM_CMD_RESOLVE_IP-open-io_uring_enter detailed listing: executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sndctrl-ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS-gettid-timer_create-socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_INITMSG-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-setsockopt$sock_int-signalfd4-syz_io_uring_setup-socket$inet_mptcp-io_uring_register$IORING_REGISTER_PERSONALITY-syz_io_uring_submit-io_uring_enter-syz_open_dev$usbfs-socket$inet_tcp-syz_open_procfs-openat-syz_usb_connect-close_range-socket$nl_generic-sendmsg$nl_generic-ioctl$USBDEVFS_SUBMITURB-fcntl$lock-mprotect-timer_settime-readv detailed listing: executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000140)=0x10001, 0x4) r3 = signalfd4(r0, 0x0, 0x0, 0x100000) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0xe261, 0x80, 0x3, 0x24e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x6, 0x0, r8, 0x0, 0x0, 0x4fc408e, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r11], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-setsockopt$inet6_tcp_TLS_TX-setsockopt$inet6_tcp_TLS_TX-mmap-writev-setsockopt$sock_int-close-close-socket$nl_netfilter-sendmsg$NFT_BATCH-ioctl$sock_SIOCETHTOOL-close-syz_usb_connect-syz_usb_connect-socket$inet_tcp detailed listing: executing program 0: socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 14 programs with base timeout 30s testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28, 12, 19, 4, 9, 16, 6, 3, 27, 2, 2, 11, 28] detailed listing: executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="7ba6b8bda73c25c9fd0f6030939bf0db2f489cbe3cb23df8f1325ae02c8884d8e0d024767b32da73d050ead299e9e1009416f84ed4b49f0241a689deb5977aed1fc434ac1df215e0e2beb917153576020c70b5a8719e7dd53dd72e3806731ff619102218f586499841120495b370289c54d94c891cab909e7847f8b98c0647ef5ad8057e38a8ba4b11f659f5f2495e6addde0ea16eff06aa346a04609f2b3339f5e45ace203bbabb1ecaae63534b47b1f67b438b82696f92a8da2ea307c397b92499f66292fd1ac2468d883c1799b32cfb36bc8cbe23333af6f1422720e3d6b336e9a8f63bfa242923837abad72e080bba0cfbd172d8658e071c633561860d", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x6c, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2f, 0x3ff, [0x1, 0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa8}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB="000000000000000001f8ffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x14) unshare(0x2020480) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x4840) close(0x3) executing program 3: socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) executing program 4: syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000640)={0x20, 0x11, 0xc3, "28560fac29bd77f7af010762a333dcfe297895826ff9fa8b9157114061dd1a6be47b3b7e01c180fee715cb0487c7445e439e6d54e16cca43f1d7628d5512552f9614180b157f9afb6edf329a4c1722e4c51a83e570b41ed650fe9003998e2cb5fc2658cc64e8b7a8f6d06a8843461d74043b78057e4eb36ceff38cb11e9907c9ad3482ffc2bda581e368dd22798ceb6a3bde6d97fe9d5587e3bba7f37a364a22ee1caaa2bd5a84e3b1932b8d50432cecc92e07594ee42d2a5d71f23ddcf5194b9455cf"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)=ANY=[@ANYBLOB="c005ff7f0000bb2e"], &(0x7f0000000800)={0x40, 0x5, 0x3, "417911"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x1) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 2: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x56) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200c0080c5d74189bec5d5972ab1fb"], 0x11) executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000140)=0x10001, 0x4) r3 = signalfd4(r0, 0x0, 0x0, 0x100000) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0xe261, 0x80, 0x3, 0x24e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x6, 0x0, r8, 0x0, 0x0, 0x4fc408e, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r11], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-syz_open_dev$video4linux-prctl$PR_SCHED_CORE-sched_setattr-openat$ttyS3-bpf$PROG_LOAD-sendmmsg$inet6-shutdown-setsockopt$inet_sctp6_SCTP_PR_SUPPORTED-close-ioctl$SNDRV_TIMER_IOCTL_INFO-socket$inet6_tcp-close-socket-listen-socket$inet_smc-setsockopt$inet_IP_IPSEC_POLICY-accept4$unix-socket$inet_mptcp-connect$inet-getpid-socket$inet6_sctp-syz_open_dev$vim2m-syz_open_dev$vbi-fcntl$dupfd detailed listing: executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="7ba6b8bda73c25c9fd0f6030939bf0db2f489cbe3cb23df8f1325ae02c8884d8e0d024767b32da73d050ead299e9e1009416f84ed4b49f0241a689deb5977aed1fc434ac1df215e0e2beb917153576020c70b5a8719e7dd53dd72e3806731ff619102218f586499841120495b370289c54d94c891cab909e7847f8b98c0647ef5ad8057e38a8ba4b11f659f5f2495e6addde0ea16eff06aa346a04609f2b3339f5e45ace203bbabb1ecaae63534b47b1f67b438b82696f92a8da2ea307c397b92499f66292fd1ac2468d883c1799b32cfb36bc8cbe23333af6f1422720e3d6b336e9a8f63bfa242923837abad72e080bba0cfbd172d8658e071c633561860d", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_MM_MAP-bpf$BPF_GET_MAP_INFO-ioctl$KVM_GET_SUPPORTED_CPUID-pipe2-pipe2-io_uring_setup-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$rdma_cm-write$RDMA_USER_CM_CMD_RESOLVE_IP-open-io_uring_enter detailed listing: executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sndctrl-ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS-gettid-timer_create-socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_INITMSG-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-setsockopt$sock_int-signalfd4-syz_io_uring_setup-socket$inet_mptcp-io_uring_register$IORING_REGISTER_PERSONALITY-syz_io_uring_submit-io_uring_enter-syz_open_dev$usbfs-socket$inet_tcp-syz_open_procfs-openat-syz_usb_connect-close_range-socket$nl_generic-sendmsg$nl_generic-ioctl$USBDEVFS_SUBMITURB-fcntl$lock-mprotect-timer_settime-readv detailed listing: executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000140)=0x10001, 0x4) r3 = signalfd4(r0, 0x0, 0x0, 0x100000) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0xe261, 0x80, 0x3, 0x24e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x6, 0x0, r8, 0x0, 0x0, 0x4fc408e, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r11], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-setsockopt$inet6_tcp_TLS_TX-setsockopt$inet6_tcp_TLS_TX-mmap-writev-setsockopt$sock_int-close-close-socket$nl_netfilter-sendmsg$NFT_BATCH-ioctl$sock_SIOCETHTOOL-close-syz_usb_connect-syz_usb_connect-socket$inet_tcp detailed listing: executing program 0: socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 14 programs with base timeout 1m40s testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28, 12, 19, 4, 9, 16, 6, 3, 27, 2, 2, 11, 28] detailed listing: executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x6c, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2f, 0x3ff, [0x1, 0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa8}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB="000000000000000001f8ffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x14) unshare(0x2020480) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x4840) close(0x3) executing program 3: socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) executing program 4: syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000640)={0x20, 0x11, 0xc3, "28560fac29bd77f7af010762a333dcfe297895826ff9fa8b9157114061dd1a6be47b3b7e01c180fee715cb0487c7445e439e6d54e16cca43f1d7628d5512552f9614180b157f9afb6edf329a4c1722e4c51a83e570b41ed650fe9003998e2cb5fc2658cc64e8b7a8f6d06a8843461d74043b78057e4eb36ceff38cb11e9907c9ad3482ffc2bda581e368dd22798ceb6a3bde6d97fe9d5587e3bba7f37a364a22ee1caaa2bd5a84e3b1932b8d50432cecc92e07594ee42d2a5d71f23ddcf5194b9455cf"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)=ANY=[@ANYBLOB="c005ff7f0000bb2e"], &(0x7f0000000800)={0x40, 0x5, 0x3, "417911"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x1) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 2: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x56) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200c0080c5d74189bec5d5972ab1fb"], 0x11) executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000140)=0x10001, 0x4) r3 = signalfd4(r0, 0x0, 0x0, 0x100000) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0xe261, 0x80, 0x3, 0x24e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x6, 0x0, r8, 0x0, 0x0, 0x4fc408e, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r11], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 14 programs bisect: split chunks (needed=false): <14> bisect: split chunk #0 of len 14 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 16, 6, 3, 27, 2, 2, 11, 28] detailed listing: executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x4840) close(0x3) executing program 3: socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) executing program 4: syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000640)={0x20, 0x11, 0xc3, "28560fac29bd77f7af010762a333dcfe297895826ff9fa8b9157114061dd1a6be47b3b7e01c180fee715cb0487c7445e439e6d54e16cca43f1d7628d5512552f9614180b157f9afb6edf329a4c1722e4c51a83e570b41ed650fe9003998e2cb5fc2658cc64e8b7a8f6d06a8843461d74043b78057e4eb36ceff38cb11e9907c9ad3482ffc2bda581e368dd22798ceb6a3bde6d97fe9d5587e3bba7f37a364a22ee1caaa2bd5a84e3b1932b8d50432cecc92e07594ee42d2a5d71f23ddcf5194b9455cf"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)=ANY=[@ANYBLOB="c005ff7f0000bb2e"], &(0x7f0000000800)={0x40, 0x5, 0x3, "417911"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x1) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 2: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x56) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200c0080c5d74189bec5d5972ab1fb"], 0x11) executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000140)=0x10001, 0x4) r3 = signalfd4(r0, 0x0, 0x0, 0x100000) r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0xe261, 0x80, 0x3, 0x24e, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x6, 0x0, r8, 0x0, 0x0, 0x4fc408e, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r11], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28, 12, 19, 4, 2, 2, 11, 28] detailed listing: executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="7ba6b8bda73c25c9fd0f6030939bf0db2f489cbe3cb23df8f1325ae02c8884d8e0d024767b32da73d050ead299e9e1009416f84ed4b49f0241a689deb5977aed1fc434ac1df215e0e2beb917153576020c70b5a8719e7dd53dd72e3806731ff619102218f586499841120495b370289c54d94c891cab909e7847f8b98c0647ef5ad8057e38a8ba4b11f659f5f2495e6addde0ea16eff06aa346a04609f2b3339f5e45ace203bbabb1ecaae63534b47b1f67b438b82696f92a8da2ea307c397b92499f66292fd1ac2468d883c1799b32cfb36bc8cbe23333af6f1422720e3d6b336e9a8f63bfa242923837abad72e080bba0cfbd172d8658e071c633561860d", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x6c, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2f, 0x3ff, [0x1, 0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa8}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB="000000000000000001f8ffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x14) unshare(0x2020480) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800000093eb401d8c250085ff8bca9f280bb1010901800bb8"], 0x0}, 0x0) executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x7, 0x2, 0x4, 0x7, 0x2000000, 0x4, 0x3}, {0x80000006, 0x2, 0x0, 0x5, 0xfc, 0xffffffff, 0x1}, {0xc0000001, 0x8000, 0x2, 0x9, 0x401, 0x5, 0x3}, {0x40000010, 0x10, 0x3, 0xffff66d2, 0x5dc6, 0x3, 0x7}]}) pipe2(&(0x7f0000000140), 0x84000) pipe2(&(0x7f0000000240), 0x4800) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2000af7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000016c0)="4272db176b6bab3cebf7668d1e7a48049d535864004050480a1da9854aaf959484b0f73350d1f92db3cabab55767dba7bda53c7c604238033ff59d0adedad7776c807aded46285315c219d643a131b25cd4daf96d400759f89afccaa010fd0613cffbe1ebf7a455c054b1bea2b1369367de3d8ec654f9f727a2703cc5ef25c4a57bf6ae0a5b0f37ebeb728ee6b1e67c9f95fe974ac56c2fe0aa2df9fdee7d86732b886c6c1a7d990fb2e51ebdd69c28f1ed75ade5b82dcd629c38f81cbf36b26e2642fc27a33276065516677", 0xcc}, {&(0x7f0000001880)="423101f64b2a3ed21b75f7bdb956f44ebe323a4a295c30225a476f5d199c33847bba497e75f9f4cff2cf9df298771c120bc6c0a0d4f0c47e52a4f700936d24fe76ba0b87b071dd5ee184586975b0d412452ba52133f6ed73140e5e6b7c23da44a917629bbf211166abd731b0b6a84214b8cd8f44511aa670a15212f690d64cbb12285f8604a861dbc88ef611cd88e248b920fe8a39404e3db0d3c4d4608fda7d9007de1414577f0e1e2e3bbd2288505416cf5886", 0xb4}, {&(0x7f0000001940)="8b89ad05f232d9410e5e0530d956d8a36a06e23b1df7295a67c65d5939e86329c032f89d368a7ca4bf86ecf1e3fca5f8e920bc0377815d32bdaf4b47d5bc994620a80aa55734fd8b4896e9584aba2caf9d70d36fd4c5d4d3e7c6fd28795765e19391f795761be70c6f403d030c9695bf684eb25ccac1915ac3e0b94e2470807977590b56af722c6feb629ae6ac18ddda3b4f27dc96a872a84b039e89f7d072d3f9cd3a260f62df49df2e6f324305a7", 0xaf}, {&(0x7f0000001a00)="b3d9b9409ee3b5c8926a73a3b45ced8243c1a71d322b6aab5f22ab3f4d6a3d848b95006a4bc518fe850377f16f549ec6bff4832f48d1e6e50c78638b7a919747ce7d491f0f256f0240fe1165e551adc1e9e9f0148a63f712bc0cd4e67d72b3cb7e4b0fd10db1b97bdf800fadb85dd4c62880a0570a448035140cef0ee8d9c94ae1c54737994c06fb86ab0fa376ea54ee6bd7eea295c6683a9324333b0c39b99ad00d72b62659d59f555439ef6a202e5c27fc5d40e43b9ce026e69c26ae27df9e33d7345403bf74a1f8c4cace3e6f4f647c0348a72a53e9e2b8132c80f25d50a01c9ad87b659796cec6caa9264c043aa1a08e536e", 0xf4}, {&(0x7f0000001b00)="7c0494d5210f44ee6fc4f8df65572e081169ba5c9f36ca4d2f6311f35673235f6f1110df6d97844ebc20355a1f394537316b00f79b04cbbce17c8c286e8f493cd3090cb4e9cecd35231e286a34035a16118b2eab5978eda5a6a539f96cf954ce8765dcbe33764cfd85f2999f99579f1cc4a2015eee8ded1305de75dbe51dc8c4e1db6585b70f942563bc3a4d283a52fda0349f46305d258a9c0eb525d71217dd0dda9abf67228508832a28fa77f3eadd3892195f6deb97c267a0c3404cf735b7dbd02eaa1293d427119745f3869b4b01fa395fcf004f6f5ad83b6a61b1f9c2466093dcc06fc6288f0c67f3", 0xeb}, {&(0x7f0000001c00)="e70235298ecfc6c612065a4673cfd506ae2d80271084d5d6e9740e10755327420fece8a47eec3a02a2d5e6043b13c672c66e45157651f15e9e18ff8b2ed284b0370318be368060e70fde5a13d0a8868e24a7d2171819d4753f1ae4be13359a17da4cda5c01dd26bcc89b70492e8b4a7de3898644cf34534c5fe2597f5f799850af1d60f1d87f738f63ce40479ab6d2c5c14a7ce74d40ab59ca729f9bdee027ab35c649e55256f50cad5ae558406a96fa20380a18972ac1c2f46d581a57d535fc821a1d0cec00a5b9d047f16d1b3c85daeafd99456700dddf9e", 0xd9}, {&(0x7f0000001d00)="af944dfdb0b0975bdfdc636f689b5091379dfdca1b801607296db8da18b93b9d83a1fbfe00becc0ca37f375a1b17fae456961b6c422296595dc9dbff80add668b829f52edc4e83d46000eff604459c0a6db63762dfef12cf41a49a62e24109bd398f1786e7686609e0448f60ae029503d3d5fdd89919bc2ceab673bd37affaf5eb4b0e1d24f36d9cc03e65d9b0e0bb7212815cc00257516f3122ec6aab3760682894e27886f4f240a06e6a1e998e466a73b5", 0xb2}], 0x7, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0xff, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2f, 0x3ff, [0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa0}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28, 12, 19, 4] detailed listing: executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x6c, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2f, 0x3ff, [0x1, 0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa8}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB="000000000000000001f8ffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x14) unshare(0x2020480) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4] detailed listing: executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB="000000000000000001f8ffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x14) unshare(0x2020480) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) executing program 2: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28, 12] detailed listing: executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="82e83062a071", 0x6}, {&(0x7f0000000980)="c19b634aaa430673583f833a6df56cdb3abd457946fe704cf6e91577bac29c95813cc1d251d7618efde56f004c70b6ff34ae920b494c56bc604d3ed3ba99dd467c76252efea5a4879dcb1c74dd45499d120b7b760c2b0e7f67fa33eee04676f1848feb755e68353b77feafca7f3eab1f726e9a02c10b3112924163d2cedc3936309bd66589e1f7a9b94feb8db24888e68ab3e607c72295b8a7940c27bf54efa850e1e49d3088535b523d656e5fb5db863f9b49ae14f1806a8eb1c404d5bf29263d858e2abed2b44d9ac0ed6f2f06a96242948c6a78371c679b6eec3f19ba7ffed8106f14f395ddccd2cf98e3", 0xec}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000e00)=[@dstopts={{0x164, 0x29, 0x37, {0x5e, 0x29, '\x00', [@pad1, @generic={0x3, 0xd2, "b533e85cd57df9c63394b2b51c0b110ba038706da393b24c36d82473b583fdf9f3d09540291ba4b158aad6571761fea49499dd0f6d41a8b1c4acb84431844f56c77882b5618c209969bfcc7d54e3900fbae3877cc5a4ffbd6e39ceaabe9d0cb7b5746cc2388cbcf081963e03a9dd03d7111ec6cf1b1cdd95625d70744fa3dc71969ad7d010094948f7665a4162005e9f8b701aeaba56c20a82a8d81b38097ab56b0988ccc6df4258eae723409894e4c301f7ba97ae78eff9a20e1c834d3a883db3846cc1fb335539453c52bc5645d39e6ad1"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x5, [0x7fffffffffffffff, 0x3, 0x9, 0xe, 0x4a]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x1, [0x3, 0x6, 0xbd, 0x2, 0x57b14d34]}}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x7c, 0x29, 0x4, {0x2e, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x1000, [0x3ff, 0x5, 0x18c, 0x37545482, 0x2, 0xc7]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}]}}}], 0x200}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001040)="4df136f25c9a23ca3d94614232bd147b47454c933a2f9b1ac022b1ad0b3fbf54748ab0d298f34129", 0x28}, {&(0x7f0000001140)="3f9fe0493ad8119992d6c253b3d1ad6ad9f9766d082715f8633f304f8b6e9a4fbefb955b653d7c638e67dea8350c125399fbbd052f874cd8ca9f187c5d297c1cf7876a5d53697b65c7c7fb755d8419f13c5ff21272064d9fa454a571fd884e7e96cff7914c5837701ca386cac4d203b528f7e0f53cd4f0bdc4ac4e6f737f3cb4111be5c2ce6d09cc0a3cc21cda2c9071ad726d19ba415db4b8b1ab478ae24d06b4ad6f60bc18cf2230d785448c3e93891a28f81956068a55c7ce8dd0724873c6b2ddb1a65d674d03d307646de847e6d8fe4446369ad24ea2eb9b8244716c0cfbdcd65a2f8206e2539462d1e9c6a7ae2afc", 0xf1}, {&(0x7f0000001240)="1dc48f3db2ed7c919c7860ae22c7f6fa16177e0c58aab42c4aa3eb7efbc76ca6297c31fb81b5165be89895ae61939025e6f720b80680c37e8914ac4ed32abc908fbb76c1a0e02334ed08ab7c24584a875a7555842ce095159a6b0d4edc05068650224ceed3cf341b2d4c1a87e540f88780903be9c92f495be7b24fe781f41a72c7235f61372b2465e0e1af71b40af32e4b245c68b55d33c3b5a6cecde3744a251aafba16f052913c7bc06d1ef2e87fe55f3d827df9a3a1bddfeab8030a627f14aaca94507ebf05ba758d33a20e", 0xcd}, {&(0x7f0000001340)="44e03684ee1a36fa0086221f3fd1176c64f39a6552395e93046724c304eee2e3e3f7e029f61bc367eee387dc5bcf50ca4de08a0194a76bbf268949546db5e4e8be0acc914c2e7c34f6a947b5e3037f5e89aab1b7c608f5ef5b6d2dc302f9d682054ad18d7b1d497f90d156a63975f9b972d72e1315a0a38ebb1e76ef80913e38d8d4070afccf7c3ef510b9588863179efbe425271d2021be4cad5d4deebd4e415f61bbdec49622e7eddab7f3815bae00ae96889f28f97ed5ca82010de2164f7fb04387edc815d45971f335486d710f23b697fd", 0xd3}, {&(0x7f0000001440)="da91ec32c3c5544dd29e8f951482ddebc8eec094b2a97ee5fbf2ebaddd26d19e149e462d694fd301f3cc6de13bb0f3058ac98d79425c99ef2f24a8359dfa303c8aaa7a3c3a343a2594e5d96ebfa5a2145639c094d8d23571079d2540ac99daa2634d4a3bea3b8aca2f0ce31c02bbd919ecf7fdb913637c66ce3aee495f945fd9ffef7d6a6ffa9294aadcc6d7ad84bf2b75de3741462c074830715553edbc29fd61bbeb9dcc337c94a57cbf552ac275e68a6a356a497309835f5cfc6712baf7786019b655bedb1f7f5e2db67af17e", 0xce}], 0x5, &(0x7f0000001580)=[@rthdr_2292={{0xa4, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x10, 0x29, 0x43, 0xc6}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}]}}}], 0xd8}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0xffff6177}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd, 0xff80, [0x9, 0xd, 0xffffffffffffffff, 0x3, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x27, @private1, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001f00)="99a804212ae6b71eb27e7293c41d15dde1fdf3518364d929729e42f40abcbb7d731eea89d9cd48fc43ca500bb7f0ba6a898879afe4dbce434afbb07d85c392f56ec4c051bd4ba41a7d2196144f", 0x4d}, {&(0x7f0000001f80)="31c63ac36badebfbcf5b6c258f40913b9b7cef07a9e7cb0a699191cd0836981a743df86525bfc9dd66f2322d25d63833bf1e274814bfce0bce96b45e8392fa6b01615e644abec265d133bff8ec5eb119a8990df250799776936c183c0291c11a710bac157da82cfb58783fafdac0f69cd440df79566e7497eddb4faf583d923f2097b641e7dd0b76de53d5a299517b2397f4755af788d2d44cdf0f1bbf4bbdd01ec6f956362cf81a846871c47204540b5c6064a87402e3c01caf96aa53d6039afd2ef501d2db7e12fe8ee2e2fc5f6ea7157ffbbe6d047ae053df561c0dc3f859001519e989989a54a0c202aa26ceeb9f", 0xf0}, {&(0x7f0000002140)="7799e46acb89e60c62656b294d0a993c82bf835a5d4fe4e39584", 0x1a}, {&(0x7f0000002180)="f2e6a4de637ac83edf1810f488a023a27e63723d619ef718ba2992e00bc364667af3957ad978c7b6f98675564b8629b9302facaa3581c38bea1c5bca2cc597300120ab64bf0dc50f0e7e8da9a92f6dbc20e06bc94a72e68034a3b2b9e4d6e52a80f7ed12d5ab2f72ccc7513981017c8532597f68018bc34ebd6e60b56d43360f919f3bb8d8e23775552467f91eaccd82c6f1799bebb3f7cb3ef2df5ce9901221aa8d63214bdbce557f33b7", 0xab}], 0x4, &(0x7f0000002280)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xec}]}}}, @rthdrdstopts={{0x6c, 0x29, 0x37, {0xff, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x2, [0x6]}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2f, 0x3ff, [0x1, 0x401, 0xd, 0x10, 0x200]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @flowinfo={{0x10, 0x29, 0xb, 0x218}}], 0xa8}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xe, @mcast1, 0x80000000}, 0x1c, 0x0}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback={0x11e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x5ff5d6847dab034c, 0x16}, {0x5, 0x4, 0x36, 0x5, 0x3ff, 0x401, 0x7, 0x7}, {0x7, 0xfff, 0xcad8, 0xce3}, 0xf4, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0xfa, 0x4, 0x923, 0x5}}, 0xe8) r6 = accept4$unix(r4, &(0x7f00000010c0), &(0x7f00000000c0)=0x6e, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r6, 0x0, r8) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_connect$midi-syz_usb_disconnect-syz_usb_ep_write-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_connect$midi-syz_usb_disconnect-syz_usb_ep_write-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: concatenation succeeded found reproducer with 12 syscalls minimizing guilty program testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_connect$midi-syz_usb_disconnect-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_connect$midi-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1-syz_usb_connect$midi detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$uac1-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect$hid-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=1m26.826784886s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host simplifying C reproducer testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program did not crash testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.826784886s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io$printer-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true reproducing took 1h46m58.665878789s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9256 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fecd RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc900001a0000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: fd 06 cc 41 ff c7 44 89 3d 29 5d e8 15 48 c7 c1 80 a3 6d 8c 48 c7 c7 e0 a3 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 71 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 57 6e 0a 3b 05 7f RSP: 0000:ffffc90000a189b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 3084a59e04af6a00 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffff88801e695de0 R08: 0000000000000100 R09: 1ffff110170e48e2 R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffff9200014314c R13: ffff8880744850a8 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000800010c0 CR3: 000000007749e000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fecd RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 9c pushf 1: 8f 02 pop (%rdx) 3: c3 ret 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 33 91 24 00 verw 0x249133(%rip) # 0x24915b 28: fb sti 29: f4 hlt * 2a: e9 8c 08 03 00 jmp 0x308bb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9256 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fecd RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc900001a0000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: fd 06 cc 41 ff c7 44 89 3d 29 5d e8 15 48 c7 c1 80 a3 6d 8c 48 c7 c7 e0 a3 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 71 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 57 6e 0a 3b 05 7f RSP: 0000:ffffc90000a189b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 3084a59e04af6a00 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffff88801e695de0 R08: 0000000000000100 R09: 1ffff110170e48e2 R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffff9200014314c R13: ffff8880744850a8 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000800010c0 CR3: 000000007749e000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fecd RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 9c pushf 1: 8f 02 pop (%rdx) 3: c3 ret 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 33 91 24 00 verw 0x249133(%rip) # 0x24915b 28: fb sti 29: f4 hlt * 2a: e9 8c 08 03 00 jmp 0x308bb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop