Extracting prog: 49m46.33424029s
Minimizing prog: 31m16.480616906s
Simplifying prog options: 0s
Extracting C: 2m8.952346137s
Simplifying C: 15m47.904381874s


extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-nanosleep-syz_open_dev$video-ioctl$VIDIOC_TRY_FMT-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect_ath9k-syz_usb_ep_write$ath9k_ep2-nanosleep-syz_usb_ep_write$ath9k_ep2-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-nanosleep-syz_open_dev$video
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-nanosleep-syz_open_dev$usbfs-ioctl$USBDEVFS_CLAIMINTERFACE-ioctl$USBDEVFS_ALLOC_STREAMS-ioctl$USBDEVFS_FREE_STREAMS
detailed listing:
executing program 0:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 6, 4, 25, 12, 5, 6, 26, 6, 2, 10, 11, 14, 5, 13, 8, 2, 25, 4, 3, 6, 8, 23, 18, 5, 10, 3, 9, 12, 9]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x74, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000400), 0x1000)
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, r2, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
read(r1, &(0x7f0000000210), 0x1000)
read(0xffffffffffffffff, &(0x7f0000000210), 0x1000)
syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0)
read(r2, &(0x7f0000000210), 0x1000)
r3 = syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0)
read(r3, &(0x7f0000000210), 0x1000)
executing program 1:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40109710780001010203010902270001010080fa0904000003ffffff00070581031000010705820240000007050302400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x0, &(0x7f0000001100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x0, &(0x7f0000002100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x0, &(0x7f0000003100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x0, &(0x7f0000004100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000005000)={0x0, &(0x7f0000005100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000006000)={0x0, &(0x7f0000006100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000007000)={0x0, &(0x7f0000007100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000008000)={0x0, &(0x7f0000008100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000009000)={0x0, &(0x7f0000009100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f000000a000)={0x0, &(0x7f000000a100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='id_ext=0000000000000000,ioc_guid=0000000000000000,dgid=fe800000000000000000000000000000,pkey=ffff,service_id=0000000000000000\x00', 0x7c)
executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1)
executing program 0:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x74, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x5, 0x2)
read(r1, &(0x7f0000000400), 0x1000)
r2 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x2)
read(r2, &(0x7f0000000400), 0x1000)
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x2)
read(r3, &(0x7f0000000400), 0x1000)
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40341278560001010203010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200010000000109022200010100803209040000000000000009040001010000000007058401000201"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
executing program 4:
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100ca00000110aaaaaaaaaa00000000000000"], 0x16)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4)
sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0)
sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r0, &(0x7f0000000000)="1b5b3f356800", 0x5)
executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa930bb9f3fd061f5)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
r1 = dup(0xffffffffffffffff)
read$FUSE(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x21, r4, 0x8, 0xffff)
r5 = dup(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0)
setpriority(0x2, 0x0, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast1}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18)
executing program 2:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x11}, 0x24004800)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xffeff034}, {0x20, 0x0, 0x9, 0x1}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x113, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x24020400)
write$cgroup_int(r3, 0x0, 0x0)
lseek(r3, 0x1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080))
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x8, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa)
executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x8180, 0x900)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0)
ioctl(r0, 0x80480911, &(0x7f0000000200))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 1:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
executing program 4:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-nanosleep-syz_open_dev$video-ioctl$VIDIOC_TRY_FMT-syz_usb_disconnect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCONNECTOR
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect_ath9k-syz_usb_ep_write$ath9k_ep2-nanosleep-syz_usb_ep_write$ath9k_ep2-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-nanosleep-syz_open_dev$video
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-nanosleep-syz_open_dev$usbfs-ioctl$USBDEVFS_CLAIMINTERFACE-ioctl$USBDEVFS_ALLOC_STREAMS-ioctl$USBDEVFS_FREE_STREAMS
detailed listing:
executing program 0:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 6, 4, 25, 12, 5, 6, 26, 6, 2, 10, 11, 14, 5, 13, 8, 2, 25, 4, 3, 6, 8, 23, 18, 5, 10, 3, 9, 12, 9]
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x74, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2)
read(r1, &(0x7f0000000400), 0x1000)
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, r2, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120)
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2)
syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1)
syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16)
syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0)
read(r1, &(0x7f0000000210), 0x1000)
read(0xffffffffffffffff, &(0x7f0000000210), 0x1000)
syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0)
read(r2, &(0x7f0000000210), 0x1000)
r3 = syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0)
read(r3, &(0x7f0000000210), 0x1000)
executing program 1:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40109710780001010203010902270001010080fa0904000003ffffff00070581031000010705820240000007050302400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x0, &(0x7f0000001100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x0, &(0x7f0000002100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x0, &(0x7f0000003100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x0, &(0x7f0000004100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000005000)={0x0, &(0x7f0000005100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000006000)={0x0, &(0x7f0000006100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000007000)={0x0, &(0x7f0000007100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000008000)={0x0, &(0x7f0000008100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000009000)={0x0, &(0x7f0000009100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f000000a000)={0x0, &(0x7f000000a100)={0xc0, 0xd, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='id_ext=0000000000000000,ioc_guid=0000000000000000,dgid=fe800000000000000000000000000000,pkey=ffff,service_id=0000000000000000\x00', 0x7c)
executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1)
executing program 0:
r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x74, &(0x7f0000000200)={0x40, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
syz_usb_control_io(r0, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$video(&(0x7f0000000080), 0x5, 0x2)
read(r1, &(0x7f0000000400), 0x1000)
r2 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x2)
read(r2, &(0x7f0000000400), 0x1000)
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x2)
read(r3, &(0x7f0000000400), 0x1000)
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40341278560001010203010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200010000000109022200010100803209040000000000000009040001010000000007058401000201"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
executing program 4:
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100ca00000110aaaaaaaaaa00000000000000"], 0x16)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4)
sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0)
sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r0, &(0x7f0000000000)="1b5b3f356800", 0x5)
executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa930bb9f3fd061f5)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
r1 = dup(0xffffffffffffffff)
read$FUSE(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x21, r4, 0x8, 0xffff)
r5 = dup(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0)
setpriority(0x2, 0x0, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast1}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18)
executing program 2:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x11}, 0x24004800)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xffeff034}, {0x20, 0x0, 0x9, 0x1}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x113, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x24020400)
write$cgroup_int(r3, 0x0, 0x0)
lseek(r3, 0x1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080))
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x8, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa)
executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x8180, 0x900)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0)
ioctl(r0, 0x80480911, &(0x7f0000000200))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 1:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
executing program 4:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: bisecting 30 programs
bisect: split chunks (needed=false): <30>
bisect: split chunk #0 of len 30 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 11, 14, 5, 13, 8, 2, 25, 4, 3, 6, 8, 23, 18, 5, 10, 3, 9, 12, 9]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
executing program 4:
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100ca00000110aaaaaaaaaa00000000000000"], 0x16)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4)
sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0)
sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r0, &(0x7f0000000000)="1b5b3f356800", 0x5)
executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa930bb9f3fd061f5)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
r1 = dup(0xffffffffffffffff)
read$FUSE(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x21, r4, 0x8, 0xffff)
r5 = dup(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0)
setpriority(0x2, 0x0, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast1}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18)
executing program 2:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x11}, 0x24004800)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xffeff034}, {0x20, 0x0, 0x9, 0x1}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x113, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x24020400)
write$cgroup_int(r3, 0x0, 0x0)
lseek(r3, 0x1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080))
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x8, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa)
executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x8180, 0x900)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0)
ioctl(r0, 0x80480911, &(0x7f0000000200))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 1:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
executing program 4:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8, 23, 18, 5, 10, 3, 9, 12, 9]
detailed listing:
executing program 3:
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5ea}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000002000)=@string={0x1a, 0x3, '0\x001\x002\x003\x004\x005\x006\x007\x008\x009\x00A\x00B\x00'}}]})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200))
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast1}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18)
executing program 2:
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async)
nanosleep(&(0x7f0000000200)={0x2}, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x11}, 0x24004800)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xffeff034}, {0x20, 0x0, 0x9, 0x1}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x113, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x24020400)
write$cgroup_int(r3, 0x0, 0x0)
lseek(r3, 0x1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'CCCC', {0x2, 0x100, 0x0, 0x1, 0x200}})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080))
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x8, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa)
executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x8180, 0x900)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0)
ioctl(r0, 0x80480911, &(0x7f0000000200))
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300766574683000"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120)
executing program 1:
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r3 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
r5 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
executing program 4:
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}})
syz_usb_disconnect(r0)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 11, 14, 5, 13, 8, 2, 25, 4, 3]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
executing program 4:
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100ca00000110aaaaaaaaaa00000000000000"], 0x16)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4)
sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0)
sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r0, &(0x7f0000000000)="1b5b3f356800", 0x5)
executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa930bb9f3fd061f5)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
r1 = dup(0xffffffffffffffff)
read$FUSE(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x21, r4, 0x8, 0xffff)
r5 = dup(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0)
setpriority(0x2, 0x0, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 2, 25, 4, 3]
detailed listing:
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)
executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write(r0, &(0x7f0000000000)="1b5b3f356800", 0x5)
executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa930bb9f3fd061f5)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
r1 = dup(0xffffffffffffffff)
read$FUSE(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x21, r4, 0x8, 0xffff)
r5 = dup(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0)
setpriority(0x2, 0x0, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 11, 14, 5, 13]
detailed listing:
executing program 1:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
executing program 4:
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100ca00000110aaaaaaaaaa00000000000000"], 0x16)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4)
sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000011c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000017c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000001e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000024c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000025c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002780)=[{&(0x7f00000027c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000028c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000003240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f00000032c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003340)=[{&(0x7f0000003380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000033c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003580)=[{&(0x7f00000035c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000038c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000039c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000003d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000003fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000004140)=[{{&(0x7f0000004640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f00000046c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004740)=[{&(0x7f0000004780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004980)=[{&(0x7f00000049c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000004f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000005080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000050c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005100)=[{&(0x7f0000005140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000051c0)=[{&(0x7f0000005200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005280)=[{&(0x7f00000052c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005340)=[{&(0x7f0000005380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000053c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000005a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005b40)=[{&(0x7f0000005b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000005d00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005d40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000005dc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005e00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005e80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005ec0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005f40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000005f80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000005fc0)=[{&(0x7f0000006000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006040)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006080)=[{&(0x7f00000060c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006100)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006140)=[{&(0x7f0000006180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000061c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006200)=[{&(0x7f0000006240)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006280)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000062c0)=[{&(0x7f0000006300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006340)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006380)=[{&(0x7f00000063c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006400)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006440)=[{&(0x7f0000006480)='\x00', 0x1}], 0x1}}, {{&(0x7f00000064c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006500)=[{&(0x7f0000006540)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006580)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000065c0)=[{&(0x7f0000006600)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006680)=[{&(0x7f00000066c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006740)=[{&(0x7f0000006780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000067c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006800)=[{&(0x7f0000006840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000006900)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000006940)=[{{&(0x7f0000006e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006e80)=[{&(0x7f0000006ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000006f40)=[{&(0x7f0000006f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000006fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007000)=[{&(0x7f0000007040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000007100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007140)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007180)=[{&(0x7f00000071c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007200)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007280)='\x00', 0x1}], 0x1}}, {{&(0x7f00000072c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007300)=[{&(0x7f0000007340)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007380)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000073c0)=[{&(0x7f0000007400)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007440)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007480)=[{&(0x7f00000074c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007500)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007540)=[{&(0x7f0000007580)='\x00', 0x1}], 0x1}}, {{&(0x7f00000075c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007600)=[{&(0x7f0000007640)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007680)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000007700)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007740)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007780)=[{&(0x7f00000077c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007800)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007840)=[{&(0x7f0000007880)='\x00', 0x1}], 0x1}}, {{&(0x7f00000078c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007900)=[{&(0x7f0000007940)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007980)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000079c0)=[{&(0x7f0000007a00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007a40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000007ac0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007b00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007b40)=[{&(0x7f0000007b80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007bc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007c00)=[{&(0x7f0000007c40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000007c80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000007cc0)=[{&(0x7f0000007d00)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000007d40)=[{{&(0x7f0000008240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008280)=[{&(0x7f00000082c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008340)=[{&(0x7f0000008380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000083c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008400)=[{&(0x7f0000008440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008580)=[{&(0x7f00000085c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008640)=[{&(0x7f0000008680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000086c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008700)=[{&(0x7f0000008740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000087c0)=[{&(0x7f0000008800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008880)=[{&(0x7f00000088c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008900)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008940)=[{&(0x7f0000008980)='\x00', 0x1}], 0x1}}, {{&(0x7f00000089c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008a00)=[{&(0x7f0000008a40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008a80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000008b00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008b40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008c00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008c40)=[{&(0x7f0000008c80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008cc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008d00)=[{&(0x7f0000008d40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008d80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008e40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008e80)=[{&(0x7f0000008ec0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008f00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000008f40)=[{&(0x7f0000008f80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000008fc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009000)=[{&(0x7f0000009040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009080)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000090c0)=[{&(0x7f0000009100)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
sendmmsg$inet(r0, &(0x7f0000009140)=[{{&(0x7f0000009640)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009680)=[{&(0x7f00000096c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009700)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009740)=[{&(0x7f0000009780)='\x00', 0x1}], 0x1}}, {{&(0x7f00000097c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009840)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009880)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000098c0)=[{&(0x7f0000009900)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009940)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009980)=[{&(0x7f00000099c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009a40)=[{&(0x7f0000009a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009b00)=[{&(0x7f0000009b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009bc0)=[{&(0x7f0000009c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009c80)=[{&(0x7f0000009cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000009d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009e00)=[{&(0x7f0000009e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009ec0)=[{&(0x7f0000009f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000009f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000009f80)=[{&(0x7f0000009fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a040)=[{&(0x7f000000a080)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a0c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a100)=[{&(0x7f000000a140)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a1c0)=[{&(0x7f000000a200)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a280)=[{&(0x7f000000a2c0)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a340)=[{&(0x7f000000a380)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a3c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a400)=[{&(0x7f000000a440)='\x00', 0x1}], 0x1}}, {{&(0x7f000000a480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f000000a4c0)=[{&(0x7f000000a500)='\x00', 0x1}], 0x1}}], 0x14, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0)
sendto$inet(r0, &(0x7f0000000400)='\x00', 0x1, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10)
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 13]
detailed listing:
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-nanosleep-syz_open_dev$sndctrl-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ-ioctl$SNDRV_CTL_IOCTL_TLV_READ
detailed listing:
executing program 0:
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-nanosleep
detailed listing:
executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 4:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000700)={0x1}, 0x0)

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
bisect: concatenation succeeded
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
extracting C reproducer
testing compiled C program (duration=1m37.360998296s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
simplifying C reproducer
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing compiled C program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
program crashed: BUG: sleeping function called from invalid context in mmc_free_host
testing program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
validation run: crashed=true
testing program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
validation run: crashed=true
testing program (duration=1m37.360998296s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: BUG: sleeping function called from invalid context in mmc_free_host
validation run: crashed=true
reproducing took 1h46m6.426139674s
repro crashed as (corrupted=false):
BUG: sleeping function called from invalid context at kernel/workqueue.c:4487
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1
preempt_count: 101, expected: 0
RCU nest depth: 0, expected: 0
1 lock held by swapper/1/0:
 #0: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 kernel/time/timer.c:1745
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 __might_resched+0x378/0x4d0 kernel/sched/core.c:9197
 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4487
 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700
 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: ac 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 3e 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
RAX: 000000000006661d RBX: ffffffff819b5450 RCX: 0000000080000001
RDX: 0000000000000001 RSI: ffffffff8e22f174 RDI: ffffffff8c4bdd80
RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
R13: 1ffff11003bdc000 R14: 1ffff92000032fd0 R15: dffffc0000000000
 arch_safe_halt arch/x86/kernel/process.c:767 [inline]
 default_idle+0x9/0x20 arch/x86/kernel/process.c:768
 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x2e0/0x540 kernel/sched/idle.c:355
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454
 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x157
 </TASK>
ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90000190000, but annotated.

======================================================
----------------
Code disassembly (best guess):
   0:	ac                   	lods   %ds:(%rsi),%al
   1:	7e 02                	jle    0x5
   3:	e9 93 06 03 00       	jmp    0x3069b
   8:	cc                   	int3
   9:	cc                   	int3
   a:	cc                   	int3
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d d3 3e 18 00 	verw   0x183ed3(%rip)        # 0x183efb
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	c3                   	ret <-- trapping instruction
  2b:	cc                   	int3
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	cc                   	int3
  37:	cc                   	int3
  38:	cc                   	int3
  39:	cc                   	int3
  3a:	cc                   	int3
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

final repro crashed as (corrupted=false):
BUG: sleeping function called from invalid context at kernel/workqueue.c:4487
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1
preempt_count: 101, expected: 0
RCU nest depth: 0, expected: 0
1 lock held by swapper/1/0:
 #0: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 kernel/time/timer.c:1745
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 __might_resched+0x378/0x4d0 kernel/sched/core.c:9197
 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4487
 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700
 call_timer_fn+0x192/0x5e0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2374 [inline]
 __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386
 run_timer_base kernel/time/timer.c:2395 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: ac 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 3e 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
RAX: 000000000006661d RBX: ffffffff819b5450 RCX: 0000000080000001
RDX: 0000000000000001 RSI: ffffffff8e22f174 RDI: ffffffff8c4bdd80
RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
R13: 1ffff11003bdc000 R14: 1ffff92000032fd0 R15: dffffc0000000000
 arch_safe_halt arch/x86/kernel/process.c:767 [inline]
 default_idle+0x9/0x20 arch/x86/kernel/process.c:768
 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x2e0/0x540 kernel/sched/idle.c:355
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454
 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x157
 </TASK>
ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90000190000, but annotated.

======================================================
----------------
Code disassembly (best guess):
   0:	ac                   	lods   %ds:(%rsi),%al
   1:	7e 02                	jle    0x5
   3:	e9 93 06 03 00       	jmp    0x3069b
   8:	cc                   	int3
   9:	cc                   	int3
   a:	cc                   	int3
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d d3 3e 18 00 	verw   0x183ed3(%rip)        # 0x183efb
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	c3                   	ret <-- trapping instruction
  2b:	cc                   	int3
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	cc                   	int3
  37:	cc                   	int3
  38:	cc                   	int3
  39:	cc                   	int3
  3a:	cc                   	int3
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop