Extracting prog: 56m47.080685607s Minimizing prog: 45m52.859897954s Simplifying prog options: 19m51.209922539s Extracting C: 6m8.703228188s Simplifying C: 0s 30 programs, timeouts [6m0s] extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-openat$iommufd-ioctl$IOMMU_IOAS_ALLOC-openat$iommufd-ioctl$IOMMU_IOAS_ALLOC-getpgrp-capset-ioctl$IOMMU_IOAS_MAP$PAGES-mkdir-prctl$PR_SCHED_CORE-fcntl$getown-sched_setaffinity-openat$hwrng-preadv-open-setsockopt$sock_int-sendfile-ioctl$KDFONTOP_GET-getdents-bpf$PROG_LOAD-socket$packet-setsockopt$packet_fanout-ioctl$VIDIOC_SUBSCRIBE_EVENT-setsockopt$packet_fanout_data-syz_emit_ethernet-ioctl$IOMMU_TEST_OP_CREATE_ACCESS-ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz-ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz-close_range-bpf$MAP_CREATE detailed listing: executing program 0: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$inet6_IPV6_XFRM_POLICY-write$FUSE_GETXATTR-syz_usb_connect$uac1-ioctl$sock_inet6_SIOCADDRT-socket$nl_xfrm-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-sendmsg$NL80211_CMD_JOIN_IBSS-sendmsg$nl_xfrm-write$rfkill-socket$nl_xfrm-syz_open_dev$usbmon-sendmsg$nl_xfrm-sendmsg$nl_xfrm-fsopen-fsconfig$FSCONFIG_SET_STRING-fsmount-openat$vnet-ioctl$VHOST_RESET_OWNER-symlinkat-symlinkat-renameat2-setsockopt$RDS_RECVERR-socket$nl_xfrm-socket$l2tp-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$inet6_IPV6_XFRM_POLICY-write$FUSE_GETXATTR-syz_usb_connect$uac1-ioctl$sock_inet6_SIOCADDRT-socket$nl_xfrm-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-sendmsg$NL80211_CMD_JOIN_IBSS-sendmsg$nl_xfrm-write$rfkill-socket$nl_xfrm-syz_open_dev$usbmon-sendmsg$nl_xfrm-sendmsg$nl_xfrm-fsopen-fsconfig$FSCONFIG_SET_STRING-fsmount-openat$vnet-ioctl$VHOST_RESET_OWNER-symlinkat-symlinkat-renameat2-setsockopt$RDS_RECVERR-socket$nl_xfrm-socket$l2tp-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-sendfile-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-socket$xdp-syz_usb_control_io$hid-syz_usb_control_io-mremap-socket$xdp detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000d00)={0x0, 0x0, 0x3, "e648d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x1d, 0xad, {0xad, 0xc, "ff9109b59f64088b2da85af1f1d4a49dc0a6d91ac64d712a29427974b4e33a059d686b88f7a7a4ad306e4f5745f4a57b23c4fbea8dbd93801985c1e8a9a8ba24352bc60204379fa1dff974cbe06f88845e6afcd8066df7a13157cad6d16b3d44299410604d20934ad2501085867a70bd992fd03fac2135a2a3e7cf81af4ac81eebb27367ab296683964546b8c5c23dd468a72c6caf595adbd7738751b175e856e2424b3da357c39e0ff08e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}}) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) mremap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x2000, 0xc, &(0x7f0000ff6000/0x2000)=nil) socket$xdp(0x2c, 0x3, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 2, 30, 13, 15, 9, 13, 3, 18, 25, 29, 4, 17, 2, 2, 30, 3, 3, 27, 1, 8, 29, 4, 29, 4, 5, 8, 4, 30] detailed listing: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240150000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x3}, 0xfffb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) syz_usb_connect(0x2, 0x190, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000c296210f415150072740102030109027e0101000000000904"], 0x0) executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000840000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x4000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}}, 0x0) executing program 1: fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001d) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x147982, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "5ef40e7ab852acb6", "582f7cccfda6a677c372675d88becd932053048ac5a438b0e48fdb55bdc83053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r7 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) executing program 1: socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x8a, 0xcd, 0x23, 0x40, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xc8, 0xaa}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x10, 0x41, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x5, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x37, 0x6, 0xcd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0xea, 0xb}}}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x5, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000d00)={0x0, 0x0, 0x3, "e648d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x1d, 0xad, {0xad, 0xc, "ff9109b59f64088b2da85af1f1d4a49dc0a6d91ac64d712a29427974b4e33a059d686b88f7a7a4ad306e4f5745f4a57b23c4fbea8dbd93801985c1e8a9a8ba24352bc60204379fa1dff974cbe06f88845e6afcd8066df7a13157cad6d16b3d44299410604d20934ad2501085867a70bd992fd03fac2135a2a3e7cf81af4ac81eebb27367ab296683964546b8c5c23dd468a72c6caf595adbd7738751b175e856e2424b3da357c39e0ff08e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}}) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) mremap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x2000, 0xc, &(0x7f0000ff6000/0x2000)=nil) socket$xdp(0x2c, 0x3, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "b3f7e97c"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000e1c37c01090224000100000000090400001503000000092140000001220f00090581d7c6b1a4b490a7746b87227ab1204036e20e73bcb76c7cc6a003be8eeff39a2eee8e5d614edb80630f7f4c133d922bf6f3885706311d1239cb955e56804e95b65e5fbb0323eb50344033a75bec993ae39e7075d47c139158be0d24c95308906ec5cf0bcd51cc5a8e4e883d054db3c75fd36bbb24dd1bdc5958118ed4b252b80cb5c5867c768d81cc1c0e866457a122fba64f5a890c1963e64721"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00224f00000015a8407a330b93bf02800300000080"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40304, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$KDSETKEYCODE(r1, 0x4b4d, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r2, &(0x7f0000001640)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @exit, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x7fff, 0x3a, &(0x7f00000001c0)=""/58, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x1, 0x1, 0x2, 0x7}, {0x4, 0x1, 0x6, 0x6}], 0x10, 0x462d, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040001e97fa2e74c0a0ad1000057330377ba25ac1414ff"], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x12, 0x0, 0x1, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r5, r3, 0xc, 0x2000, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) syz_usb_disconnect(r0) executing program 4: openat$nullb(0xffffffffffffff9c, 0x0, 0x80c002000104082, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) executing program 4: r0 = socket(0x10, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) r1 = memfd_create(&(0x7f0000000940)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfdP\x96\\@\xdd\xa0\xa7lv\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90j\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\x00\x00\x00\x00\x00\x00\x00\x06\x00\r\x1b\xd3\xff]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5\x10\x00\xf4\xf8\xde\xf3\x00q?[\xba=\x1a7\b\xa1\xd3?\xbby\xa7\xea\xf7\x03\xee\xf31\a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\x0f\xeb\x17{\x1f\x990\xb8\x05\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\x00\x00\x00\x00\x00\x00\xcc\xdf\x9f\xb6\x03J\x00\x00\x00\x00\x00\xc7\x12RV\x94\x03)\xd5h\x9ef\xc0\xf7L\xac<\x1e+\xa6\xb9\ng\xd5\xa3$\x87\xa7AK$\xe8\xd2\xc5&d\xa8\x93\x0e\xc2\xa7\x94/nH\x05I \xc7{\x99\xe6\x04\xd2d\xcb\xde{\xb7}\xba#\x04\xa7\x9eK5\xd9\xd2M\x855\x13\xb0\xe6dc[Fx\xf5\xd7f\xe1\x97\x7f{\x9a\xedoR\xf4\x9b.\x88<%\x9c\x81\x1f\xc6\x15R\\S\b\x87\xf8U\xffH\xf8\x0f\xbcB\x1d6\xf6N##\xd7+y\xf7\xef\xf4M\xb4y\xdcW\x13\x88=\xc5\xa6\xad\x0f\xd8y\xd6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x13\xefX\x12\xb5r\xc5j-\x83\xbf<+\xe6o\xf8KX\a\xdf\xc1\xbd\xa7\x88\xd8\xdf\xdaXYJq\xb6e\xb9\xec', 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000000500000008003e01"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x40000]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r6, 0x2d, 0x0, 0x2400001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0xe0}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x99}, @in6={0xa, 0x4e20, 0x10000, @remote, 0x5}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0xc2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000}], 0x90) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3fffc00, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x80, 0x0, 0x4007}}) executing program 4: r0 = syz_usb_connect(0x5, 0xbb, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000077491940c41066800ced010203010902a90001000010000904d5ff025ba7c40009050602ff03000000090582022000000000072501824083007e07332c8132ac86da030f115a4a3360130a59247465a066987c211ab3fb108cf964ccecb01c19b7bfe4ba2d1b776d0108a4a573520f241a00b870702e7f80f9692820e1b65b1e9574ad11ff2caf3fceb6dbd70eef362d3a9460f6d33d64fd74c79ebdddb4238d12c6d2b14a59c053401b6e51fd6272b683092fc2804e04"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100000e000b240201064dbd81"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ef17ee6000000000000109022d000100000000090400000103000200092104000001220500090581"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) geteuid() sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRESDEC=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00330100000024"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000002080)={0x10, &(0x7f0000001f80)=ANY=[], 0x0, 0x0}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d507df08c410448200dc010203010902120001000000000904000000030000009073643aecb411634d74057b1cba9af4a239b2fd9d42b4df1472dc05a98ddb93602806eb173ff444db639c2ef12900f2450146f378e6cc6870cf49b9bbcca4702282f76884ec57221a64dadfefa6644b5ed01b2cea4dc8c1b97d197eed7c92ba6e8f772148a95e68ac289b2c7ce9908a5d2b439dcbabce8dacb9d040f199ff1be8307864609ec5f13799"], 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x5, {0x5, 0x6, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000013e8e000008000200ac1414aa08000100ac1414aa08"], 0x70}}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0xfffffffc, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x60, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, {}, {}, {}, {0x0, 0x8effffff}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000001400000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x7}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="880100001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000000000000000200001000000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002327ffffffffffff000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000024000900fd8000000000000001000080000000000002000000000000008000000000000028001a00fc02000000cd7187780ddcb60e000000ac141433000000000000000000000000020001050a00100001"], 0x188}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020000005"], 0x38) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x10}, &(0x7f0000000140)=0xc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061f065000000000006000000ff8000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 0: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) syz_usb_connect(0x2, 0x190, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000c296210f415150072740102030109027e0101000000000904"], 0x0) executing program 2: socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dvmrp0\x00', &(0x7f00000000c0)=@ethtool_sfeatures}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x5100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x29, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x8, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x3, 0x9, 0xff, 0xc}, 0xed, &(0x7f0000000380)={0x5, 0xf, 0xed, 0x3, [@generic={0xc9, 0x10, 0xa, "1e57933849d511cb5bceece78cf995ac375eef467630245ababb4285059b1a074a732c72ac50a69036e2f6cf7d5b755a4e751d92fe5bead231f8ced9785f27f5bc23d55af6af143a9be49bb7f79662c034b72a7bc31c72a62f640baa5454285c38da1ed00dbc00cf2b591d1b290e60656446174a7338395f0e67cbcb4e1eced4dd6202aaaa09ef1ef249ba8dc188783053c44ecc805ac352e94be1e4d52ae3975e513fa58998a0dff78aea2929acb5ebe1e09c36a65f76f7e5841459f43afb1dad7b4a4b8c40"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x20, 0x6, 0x0, 0xe9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a0146a50e384e9c14dcb4f52b7784ef9"}]}, 0x4, [{0x57, &(0x7f0000000480)=@string={0x57, 0x3, "337a89089b0e739ee977cb943059935c56b4ddb255b32a6a26a0e812cbf0e95955d2ba28cd166f8bfe5990672c3fff8411da3a25e3583a166705a6946b7d3f5b34505e1fa6513466ddfcfb360282348c2dd9d5c4ea"}}, {0xd4, &(0x7f0000000600)=@string={0xd4, 0x3, "8e575bf2d0c5bb4386e5727f9847ab3157b6647922d759292ed22f5b443d6895f2014c67fd712ce548761d249f39b4f594190d670968f7e3f8a1b39b9e1a3eee7350b5df540f0498ac3b667b6addac581c2b14fac5c7d76f14650040959af50ba63a37acf556cd3b0d753b84c755c064131955f67b12430100b55d884ceac89d884e55f02b9607886f9e85acc10ede6ac29c51ed01f5042293c34d4c6985ef4f66b90b1f728f755edee056606a9ce60e0bf15962e05f5542481ad7d2c96ee316d9fe9e204f92496587d96d1e86ef579c52c1"}}, {0x4c, &(0x7f0000000540)=@string={0x4c, 0x3, "61a9c0918a633601dcd449ad501c0ab546528bb9369427e6fe9ce5588d8171938188cedbb299c9fd4bb220db198e95bb7d623ea43092d64ea633553b8fb9e1163cec68e19f2dc11e4c47"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x0, 0x23, 0xf3, {0xf3, 0xa, "88d01ba816f278b1131d8ad5303d635fa6f7333c98365511d45133846d09cfd3200a536acb87153101807863ef1996d59370e3905a5eb0c3036c0b9e7ec33fc905756d84a25092a4df33e8f7b7f926bd4df11ea8a743d9ac5115b8a1193ff816614cc187d18ea6e4084d5afaa22da77e9dc372bad83692af9c05529aecbba935d5d4d6c5db74c3912109299ed5ac2cec952f699afbd9e31ced085b40f2e4ccc2cac8f44e8648c3a43dc03b090d99c939a92cbbec0613a7b4bca6eac2ba6cee393013d98486e7df5e4d9652a0cd9443c7fc12d676c10d68e7c37eb50c7321f211323ff1fae4bc4174471b68077fa23b6c0e"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000940)={0x0, 0x1c, 0xf0, "00dfc4c0e6efc2f94a5856ad0f538c5864c990397bbb1da4b170169f2bac255432c41359057cd20313324689b7e4f185c772bf0466a03fd598c646b605b8729ceff025127b929123dc058838f94050001ff009b5eea5b946c181c81fa1cb97f6294390c39db23df2ae3bfe00336254c06a04179202c3b250722c9d55d63cff904288e4424b0f5b8d313528a43b5e1f1ae7f02dec4a8cf2e6e6a180a43b5e4b6c89ec5431684ea10f94262d67d911280a029debcc6c7a08558b02f71b75b1093549e24c18116a3aee23cded6a3fefb4812de9851017e9a93f2ff17ec0c21dd65b056b57980cad0f80d314ddc608c00503"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2000c500000000c3f41e7c32181a89c9484b066019f72129618268939b99898bf7960b768929e22213e22ccfddab4ef4f258a36bdbba66076b6fb07b3aa5aa9321607a93e8b7bc971a4b1b77c36fb392e8538951025579f72c5e79f52d23a9839b8d19a5c2ce718d637e9601e92b3df09cd3551a532538a1c6fc639a16087ec407e03c7e7897526d563f988776921e1101362f096174bbc3cf0c8d5ab0d0b2ab1fd5155b8c32151840a43d1f0bf33335c093f3955cdd788b649f4ea0f3f0202fb6782f7bc1d4b356b2813b"], &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x8}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), 0x14) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) r6 = inotify_init1(0x80800) fallocate(r6, 0x40, 0x5, 0x7) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r7, &(0x7f00000021c0)=[{{&(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ufshcd_clk_gating\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) executing program 0: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value=0xe80e}, 0x48) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r2, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/189, 0xbd}], 0x1}, 0x3}], 0x1, 0x122, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a0104000000000000fff50700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e74657200"], 0x12c}}, 0x0) executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000770000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000000)=0x85, 0x7, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x11, 0x800000003, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000600)=""/220, 0xdc}], 0x9, &(0x7f0000001800)=""/28, 0x1c}, 0x5}, {{&(0x7f0000001840)=@tipc=@name, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/68, 0x44}, 0x2}, {{&(0x7f00000019c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000005280)=""/12, 0xc}, {&(0x7f0000001a80)=""/159, 0x9f}, {&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/152, 0x98}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/40, 0x28}], 0x6, &(0x7f0000001e00)=""/42, 0x2a}, 0x7ffe}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/123, 0x7b}, {&(0x7f0000002ec0)=""/44, 0x2c}], 0x3, &(0x7f0000002f40)=""/46, 0x2e}, 0x10000}, {{&(0x7f0000002f80)=@nl, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/133, 0x85}], 0x1, &(0x7f0000003100)=""/100, 0x64}, 0xffffffff}, {{&(0x7f0000003180)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003200)=""/135, 0x87}, {&(0x7f00000032c0)=""/30, 0x1e}, {&(0x7f0000003340)=""/81, 0x51}, {&(0x7f00000052c0)=""/140, 0x8c}, {&(0x7f0000003440)=""/71, 0x47}, {&(0x7f00000034c0)=""/142, 0x8e}], 0x6, &(0x7f0000003600)=""/124, 0x7c}, 0x756}, {{&(0x7f0000003680)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003700)=""/77, 0x4d}], 0x1, &(0x7f00000037c0)=""/1, 0x1}}, {{&(0x7f0000003800)=@xdp, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003880)=""/110, 0x6e}, {&(0x7f0000003900)=""/156, 0x9c}, {&(0x7f00000039c0)=""/233, 0xe9}], 0x3, &(0x7f0000003b00)=""/52, 0x34}, 0x6}, {{&(0x7f0000003b40)=@xdp, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003bc0)=""/8, 0x8}, {&(0x7f0000003c00)=""/246, 0xf6}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/234, 0xea}, {&(0x7f0000003e80)=""/139, 0x8b}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/60, 0x3c}], 0x7}, 0x1000}], 0x9, 0x40000021, &(0x7f0000005240)={0x0, 0x989680}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x19) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) timerfd_settime(r2, 0x0, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x2a, 0x0, 0xfffffffe, 0x3, 0x0, @void, @value}, 0xffffffffffffff5a) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480010}, {{0x18, 0x1, 0x1, 0x4000, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e40)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) (fail_nth: 6) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) executing program 2: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program crashed: INFO: rcu detected stall in ipv6_list_rcv bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 29, 4, 17, 2, 2, 30, 3, 3, 27, 1, 8, 29, 4, 29, 4, 5, 8, 4, 30] detailed listing: executing program 4: r0 = syz_usb_connect(0x5, 0xbb, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000077491940c41066800ced010203010902a90001000010000904d5ff025ba7c40009050602ff03000000090582022000000000072501824083007e07332c8132ac86da030f115a4a3360130a59247465a066987c211ab3fb108cf964ccecb01c19b7bfe4ba2d1b776d0108a4a573520f241a00b870702e7f80f9692820e1b65b1e9574ad11ff2caf3fceb6dbd70eef362d3a9460f6d33d64fd74c79ebdddb4238d12c6d2b14a59c053401b6e51fd6272b683092fc2804e04"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100000e000b240201064dbd81"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ef17ee6000000000000109022d000100000000090400000103000200092104000001220500090581"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) geteuid() sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRESDEC=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00330100000024"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000002080)={0x10, &(0x7f0000001f80)=ANY=[], 0x0, 0x0}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d507df08c410448200dc010203010902120001000000000904000000030000009073643aecb411634d74057b1cba9af4a239b2fd9d42b4df1472dc05a98ddb93602806eb173ff444db639c2ef12900f2450146f378e6cc6870cf49b9bbcca4702282f76884ec57221a64dadfefa6644b5ed01b2cea4dc8c1b97d197eed7c92ba6e8f772148a95e68ac289b2c7ce9908a5d2b439dcbabce8dacb9d040f199ff1be8307864609ec5f13799"], 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x5, {0x5, 0x6, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000013e8e000008000200ac1414aa08000100ac1414aa08"], 0x70}}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0xfffffffc, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x60, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, {}, {}, {}, {0x0, 0x8effffff}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000001400000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) executing program 3: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x7}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="880100001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000000000000000200001000000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002327ffffffffffff000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000024000900fd8000000000000001000080000000000002000000000000008000000000000028001a00fc02000000cd7187780ddcb60e000000ac141433000000000000000000000000020001050a00100001"], 0x188}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020000005"], 0x38) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x10}, &(0x7f0000000140)=0xc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061f065000000000006000000ff8000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 0: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) syz_usb_connect(0x2, 0x190, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000c296210f415150072740102030109027e0101000000000904"], 0x0) executing program 2: socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dvmrp0\x00', &(0x7f00000000c0)=@ethtool_sfeatures}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x5100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x29, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x8, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x3, 0x9, 0xff, 0xc}, 0xed, &(0x7f0000000380)={0x5, 0xf, 0xed, 0x3, [@generic={0xc9, 0x10, 0xa, "1e57933849d511cb5bceece78cf995ac375eef467630245ababb4285059b1a074a732c72ac50a69036e2f6cf7d5b755a4e751d92fe5bead231f8ced9785f27f5bc23d55af6af143a9be49bb7f79662c034b72a7bc31c72a62f640baa5454285c38da1ed00dbc00cf2b591d1b290e60656446174a7338395f0e67cbcb4e1eced4dd6202aaaa09ef1ef249ba8dc188783053c44ecc805ac352e94be1e4d52ae3975e513fa58998a0dff78aea2929acb5ebe1e09c36a65f76f7e5841459f43afb1dad7b4a4b8c40"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x20, 0x6, 0x0, 0xe9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a0146a50e384e9c14dcb4f52b7784ef9"}]}, 0x4, [{0x57, &(0x7f0000000480)=@string={0x57, 0x3, "337a89089b0e739ee977cb943059935c56b4ddb255b32a6a26a0e812cbf0e95955d2ba28cd166f8bfe5990672c3fff8411da3a25e3583a166705a6946b7d3f5b34505e1fa6513466ddfcfb360282348c2dd9d5c4ea"}}, {0xd4, &(0x7f0000000600)=@string={0xd4, 0x3, "8e575bf2d0c5bb4386e5727f9847ab3157b6647922d759292ed22f5b443d6895f2014c67fd712ce548761d249f39b4f594190d670968f7e3f8a1b39b9e1a3eee7350b5df540f0498ac3b667b6addac581c2b14fac5c7d76f14650040959af50ba63a37acf556cd3b0d753b84c755c064131955f67b12430100b55d884ceac89d884e55f02b9607886f9e85acc10ede6ac29c51ed01f5042293c34d4c6985ef4f66b90b1f728f755edee056606a9ce60e0bf15962e05f5542481ad7d2c96ee316d9fe9e204f92496587d96d1e86ef579c52c1"}}, {0x4c, &(0x7f0000000540)=@string={0x4c, 0x3, "61a9c0918a633601dcd449ad501c0ab546528bb9369427e6fe9ce5588d8171938188cedbb299c9fd4bb220db198e95bb7d623ea43092d64ea633553b8fb9e1163cec68e19f2dc11e4c47"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x0, 0x23, 0xf3, {0xf3, 0xa, "88d01ba816f278b1131d8ad5303d635fa6f7333c98365511d45133846d09cfd3200a536acb87153101807863ef1996d59370e3905a5eb0c3036c0b9e7ec33fc905756d84a25092a4df33e8f7b7f926bd4df11ea8a743d9ac5115b8a1193ff816614cc187d18ea6e4084d5afaa22da77e9dc372bad83692af9c05529aecbba935d5d4d6c5db74c3912109299ed5ac2cec952f699afbd9e31ced085b40f2e4ccc2cac8f44e8648c3a43dc03b090d99c939a92cbbec0613a7b4bca6eac2ba6cee393013d98486e7df5e4d9652a0cd9443c7fc12d676c10d68e7c37eb50c7321f211323ff1fae4bc4174471b68077fa23b6c0e"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000940)={0x0, 0x1c, 0xf0, "00dfc4c0e6efc2f94a5856ad0f538c5864c990397bbb1da4b170169f2bac255432c41359057cd20313324689b7e4f185c772bf0466a03fd598c646b605b8729ceff025127b929123dc058838f94050001ff009b5eea5b946c181c81fa1cb97f6294390c39db23df2ae3bfe00336254c06a04179202c3b250722c9d55d63cff904288e4424b0f5b8d313528a43b5e1f1ae7f02dec4a8cf2e6e6a180a43b5e4b6c89ec5431684ea10f94262d67d911280a029debcc6c7a08558b02f71b75b1093549e24c18116a3aee23cded6a3fefb4812de9851017e9a93f2ff17ec0c21dd65b056b57980cad0f80d314ddc608c00503"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2000c500000000c3f41e7c32181a89c9484b066019f72129618268939b99898bf7960b768929e22213e22ccfddab4ef4f258a36bdbba66076b6fb07b3aa5aa9321607a93e8b7bc971a4b1b77c36fb392e8538951025579f72c5e79f52d23a9839b8d19a5c2ce718d637e9601e92b3df09cd3551a532538a1c6fc639a16087ec407e03c7e7897526d563f988776921e1101362f096174bbc3cf0c8d5ab0d0b2ab1fd5155b8c32151840a43d1f0bf33335c093f3955cdd788b649f4ea0f3f0202fb6782f7bc1d4b356b2813b"], &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x8}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), 0x14) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) r6 = inotify_init1(0x80800) fallocate(r6, 0x40, 0x5, 0x7) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r7, &(0x7f00000021c0)=[{{&(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ufshcd_clk_gating\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) executing program 0: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value=0xe80e}, 0x48) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r2, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/189, 0xbd}], 0x1}, 0x3}], 0x1, 0x122, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a0104000000000000fff50700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e74657200"], 0x12c}}, 0x0) executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000770000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000000)=0x85, 0x7, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x11, 0x800000003, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000600)=""/220, 0xdc}], 0x9, &(0x7f0000001800)=""/28, 0x1c}, 0x5}, {{&(0x7f0000001840)=@tipc=@name, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/68, 0x44}, 0x2}, {{&(0x7f00000019c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000005280)=""/12, 0xc}, {&(0x7f0000001a80)=""/159, 0x9f}, {&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/152, 0x98}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/40, 0x28}], 0x6, &(0x7f0000001e00)=""/42, 0x2a}, 0x7ffe}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/123, 0x7b}, {&(0x7f0000002ec0)=""/44, 0x2c}], 0x3, &(0x7f0000002f40)=""/46, 0x2e}, 0x10000}, {{&(0x7f0000002f80)=@nl, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/133, 0x85}], 0x1, &(0x7f0000003100)=""/100, 0x64}, 0xffffffff}, {{&(0x7f0000003180)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003200)=""/135, 0x87}, {&(0x7f00000032c0)=""/30, 0x1e}, {&(0x7f0000003340)=""/81, 0x51}, {&(0x7f00000052c0)=""/140, 0x8c}, {&(0x7f0000003440)=""/71, 0x47}, {&(0x7f00000034c0)=""/142, 0x8e}], 0x6, &(0x7f0000003600)=""/124, 0x7c}, 0x756}, {{&(0x7f0000003680)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003700)=""/77, 0x4d}], 0x1, &(0x7f00000037c0)=""/1, 0x1}}, {{&(0x7f0000003800)=@xdp, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003880)=""/110, 0x6e}, {&(0x7f0000003900)=""/156, 0x9c}, {&(0x7f00000039c0)=""/233, 0xe9}], 0x3, &(0x7f0000003b00)=""/52, 0x34}, 0x6}, {{&(0x7f0000003b40)=@xdp, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003bc0)=""/8, 0x8}, {&(0x7f0000003c00)=""/246, 0xf6}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/234, 0xea}, {&(0x7f0000003e80)=""/139, 0x8b}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/60, 0x3c}], 0x7}, 0x1000}], 0x9, 0x40000021, &(0x7f0000005240)={0x0, 0x989680}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x19) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) timerfd_settime(r2, 0x0, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x2a, 0x0, 0xfffffffe, 0x3, 0x0, @void, @value}, 0xffffffffffffff5a) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480010}, {{0x18, 0x1, 0x1, 0x4000, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e40)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) (fail_nth: 6) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) executing program 2: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program crashed: INFO: rcu detected stall in corrupted bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 29, 4, 29, 4, 5, 8, 4, 30] detailed listing: executing program 0: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value=0xe80e}, 0x48) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r2, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/189, 0xbd}], 0x1}, 0x3}], 0x1, 0x122, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a0104000000000000fff50700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e74657200"], 0x12c}}, 0x0) executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000770000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000000)=0x85, 0x7, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x11, 0x800000003, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000600)=""/220, 0xdc}], 0x9, &(0x7f0000001800)=""/28, 0x1c}, 0x5}, {{&(0x7f0000001840)=@tipc=@name, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/68, 0x44}, 0x2}, {{&(0x7f00000019c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000005280)=""/12, 0xc}, {&(0x7f0000001a80)=""/159, 0x9f}, {&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/152, 0x98}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/40, 0x28}], 0x6, &(0x7f0000001e00)=""/42, 0x2a}, 0x7ffe}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/123, 0x7b}, {&(0x7f0000002ec0)=""/44, 0x2c}], 0x3, &(0x7f0000002f40)=""/46, 0x2e}, 0x10000}, {{&(0x7f0000002f80)=@nl, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/133, 0x85}], 0x1, &(0x7f0000003100)=""/100, 0x64}, 0xffffffff}, {{&(0x7f0000003180)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003200)=""/135, 0x87}, {&(0x7f00000032c0)=""/30, 0x1e}, {&(0x7f0000003340)=""/81, 0x51}, {&(0x7f00000052c0)=""/140, 0x8c}, {&(0x7f0000003440)=""/71, 0x47}, {&(0x7f00000034c0)=""/142, 0x8e}], 0x6, &(0x7f0000003600)=""/124, 0x7c}, 0x756}, {{&(0x7f0000003680)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003700)=""/77, 0x4d}], 0x1, &(0x7f00000037c0)=""/1, 0x1}}, {{&(0x7f0000003800)=@xdp, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003880)=""/110, 0x6e}, {&(0x7f0000003900)=""/156, 0x9c}, {&(0x7f00000039c0)=""/233, 0xe9}], 0x3, &(0x7f0000003b00)=""/52, 0x34}, 0x6}, {{&(0x7f0000003b40)=@xdp, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003bc0)=""/8, 0x8}, {&(0x7f0000003c00)=""/246, 0xf6}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/234, 0xea}, {&(0x7f0000003e80)=""/139, 0x8b}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/60, 0x3c}], 0x7}, 0x1000}], 0x9, 0x40000021, &(0x7f0000005240)={0x0, 0x989680}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x19) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) timerfd_settime(r2, 0x0, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x2a, 0x0, 0xfffffffe, 0x3, 0x0, @void, @value}, 0xffffffffffffff5a) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480010}, {{0x18, 0x1, 0x1, 0x4000, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e40)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xde, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x10}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x9, "f32b3c604a"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0xf, 0xa, "12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x18, "16", "25b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "", "067727"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x1, 0x9, "ac3d0bdd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6bd, 0x80, 0x51, "28ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x67, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, 0x1, 0x1}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x101000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000001c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) (fail_nth: 6) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) executing program 2: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program crashed: INFO: rcu detected stall in worker_thread bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 8, 4, 30] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) (fail_nth: 6) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) executing program 2: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program crashed: INFO: rcu detected stall in sk_skb_reason_drop bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000000000000000043000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) executing program 2: r0 = io_uring_setup(0x66b, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = getpgrp(0x0) capset(&(0x7f00000002c0)={0x20071026, r5}, &(0x7f0000000300)={0x8, 0x1, 0xffffff85, 0x4ce, 0x5, 0x7a0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x84000e3d) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x11, 0x1a, 0x1a5, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x4, 0x709b56e0, 0x2}) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000280)={0x2000000000000171, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0xe5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000800ca3f963b75db5944697761cfc0d32cfc6265094965f812a887aeb68a56f4368454a6d2c0365e748534d78ee50ff4c98c6bf3758e54f99ef17b9f137c210c4f881a05e4359fdba3a8de3e433ab963a89bdf423bfe10b27977b17c42fe44a0d547d2432062b6c3acfec4c806a9dd1c13d314cdd07601aa0208eecf4f4f29c18b7e9eff05ad4e72c76620b6589172a047c826cdda4bc1ebb4165bb3c2a1d11ff"], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d306a}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 8] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) (fail_nth: 6) executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) program crashed: INFO: rcu detected stall in cleanup_mnt bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1 detailed listing: executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) program crashed: INFO: rcu detected stall in sys_wait4 bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) (async) program crashed: INFO: rcu detected stall in addrconf_rs_timer bisect: concatenation succeeded found reproducer with 8 syscalls minimizing guilty program testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) (async) program crashed: INFO: rcu detected stall in mac80211_hwsim_beacon testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) program crashed: INFO: rcu detected stall in sock_write_iter testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1-syz_usb_connect detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) (async) program crashed: INFO: rcu detected stall in __run_timer_base testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT-syz_usb_control_io$uac1 detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x70, {0x70, 0x23, "b371d18e9e26c91d181dd569ecd6f797fc72ac619f5251c33610752d50c53a0569078093eb01be5e6312eeccf88a6b6b523503cbaed6ba6f36d466ed287239aee429ea7629686bbce15980d8ac11c950172719f25f2e54e9d39fb0e760ba86152114faf289a92ff939a20dfa885a"}}, &(0x7f0000000100)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "5afa58727a81eb1e864abe4bae5cc671d94b9c7db4c12ab98cd24dfb4a590cb5dab525a00f8a115b1f5b427e94f23f60a1c37fea05a9a9833109640534f66dd6b916d7660f97f5e2ed270d80fe49917187350e464b421203c397d552fc2b45df04055ada2ff015c70326fb615114301a4dbf2fce907543544f9f4f6660451ec95147e0ffe6c2407fc4b6a3ad"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x26, "0c37052d7fa5fdcefa14eea51f14f31a65f2bd2b40dd8247e7dd213b0bf1fbffd3096e5c2953"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000000280)={0x20, 0x81, 0x2, "1d35"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "99d2"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "3cc5"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "f5026ddb"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "0ed3ff"}}) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program crashed: INFO: task hung in jbd2_journal_commit_transaction testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) program did not crash testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-ioctl$HIDIOCSREPORT detailed listing: executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash testing program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=5m13.865136322s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=5m13.865136322s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program crashed: INFO: rcu detected stall in corrupted extracting C reproducer testing compiled C program (duration=5m13.865136322s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=5m13.865136322s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash testing program (duration=5m13.865136322s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program did not crash reproducing took 2h8m5.596992274s repro crashed as (corrupted=true): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2636 jiffies s: 3593 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5429 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:100 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:227 [inline] RIP: 0010:unwind_next_frame+0x6a4/0x22d0 arch/x86/kernel/unwind_orc.c:494 Code: 09 00 00 4c 89 7c 24 28 48 8b 44 24 58 42 80 3c 20 00 74 08 4c 89 f7 e8 ba 0b bb 00 49 8b 2e e9 32 02 00 00 4d 89 ec 4d 89 ee <48> 89 e8 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 RSP: 0018:ffffc90000006890 EFLAGS: 00000083 RAX: ffffffff90349c48 RBX: ffffffff90349c4c RCX: ffffffff90349c50 report is corrupted, running repro again testing program (duration=5m13.865136322s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-ioctl$HIDIOCSREPORT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) program crashed: INFO: task hung in __input_unregister_device final repro crashed as (corrupted=false): INFO: task kworker/1:0:25 blocked for more than 143 seconds. Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:22736 pid:25 tgid:25 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5264 [inline] __schedule+0x1893/0x4b50 kernel/sched/core.c:6607 __schedule_loop kernel/sched/core.c:6684 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6699 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6756 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a7/0xd70 kernel/locking/mutex.c:752 __input_unregister_device+0x2f3/0x620 drivers/input/input.c:2272 input_unregister_device+0xa3/0x100 drivers/input/input.c:2511 imon_init_intf0 drivers/media/rc/imon.c:2289 [inline] imon_probe+0x264e/0x31b0 drivers/media/rc/imon.c:2434 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6d/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/1:7:5450 blocked for more than 145 seconds. Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:7 state:D stack:23448 pid:5450 tgid:5450 ppid:2 flags:0x00004000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5264 [inline] __schedule+0x1893/0x4b50 kernel/sched/core.c:6607 __schedule_loop kernel/sched/core.c:6684 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6699 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6756 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a7/0xd70 kernel/locking/mutex.c:752 __input_unregister_device+0x2f3/0x620 drivers/input/input.c:2272 input_unregister_device+0xa3/0x100 drivers/input/input.c:2511 imon_init_intf0 drivers/media/rc/imon.c:2289 [inline] imon_probe+0x264e/0x31b0 drivers/media/rc/imon.c:2434 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6d/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Showing all locks held in the system: 7 locks held by kworker/1:0/25: #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffff888143be3190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #2: ffff888143be3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff888059ebc190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #3: ffff888059ebc190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #4: ffff8880286aa160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #4: ffff8880286aa160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #5: ffff8880286a8088 (&ictx->lock){+.+.}-{3:3}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline] #5: ffff8880286a8088 (&ictx->lock){+.+.}-{3:3}, at: imon_probe+0x3ec/0x31b0 drivers/media/rc/imon.c:2434 #6: ffffffff8f753d68 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x2f3/0x620 drivers/input/input.c:2272 1 lock held by khungtaskd/30: #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6701 5 locks held by kworker/u8:2/35: #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:580 #3: ffff888031ac40e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #3: ffff888031ac40e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1094 [inline] #3: ffff888031ac40e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 drivers/base/dd.c:1292 #4: ffffffff9002ed48 (uevent_sock_mutex){+.+.}-{3:3}, at: uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] #4: ffffffff9002ed48 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 3 locks held by kworker/u8:3/54: 7 locks held by kworker/0:2/59: #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc9000134fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc9000134fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffff888028013190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #2: ffff888028013190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff888071fe7190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #3: ffff888071fe7190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #4: ffff888024fa6160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #4: ffff888024fa6160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #5: ffff88802477f088 (&ictx->lock){+.+.}-{3:3}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline] #5: ffff88802477f088 (&ictx->lock){+.+.}-{3:3}, at: imon_probe+0x3ec/0x31b0 drivers/media/rc/imon.c:2434 #6: ffffffff8f753d68 (input_mutex){+.+.}-{3:3}, at: input_register_device+0xaee/0x1110 drivers/input/input.c:2463 3 locks held by kworker/u8:7/2567: #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc900097f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc900097f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:276 2 locks held by dhcpcd/4894: #0: ffff88807e2276c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 net/netlink/af_netlink.c:2271 #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 net/core/rtnetlink.c:6505 2 locks held by getty/4986: #0: ffff88802e3ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211 2 locks held by kworker/0:3/5295: 9 locks held by kworker/0:4/5378: 9 locks held by kworker/0:6/5416: 7 locks held by kworker/1:7/5450: #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff888143ad4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc9000367fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc9000367fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffff888143bab190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #2: ffff888143bab190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffff88805d699190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #3: ffff88805d699190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #4: ffff888069c1f160 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #4: ffff888069c1f160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1004 #5: ffff888030b5a088 (&ictx->lock){+.+.}-{3:3}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline] #5: ffff888030b5a088 (&ictx->lock){+.+.}-{3:3}, at: imon_probe+0x3ec/0x31b0 drivers/media/rc/imon.c:2434 #6: ffffffff8f753d68 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x2f3/0x620 drivers/input/input.c:2272 4 locks held by udevd/5640: #0: ffff88802e7368b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff888024dd1888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88807e337878 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff888059ebc190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1019 [inline] #3: ffff888059ebc190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/5644: #0: ffff88807ecbd790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff88802c51b488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff888057b814b8 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805d158190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1019 [inline] #3: ffff88805d158190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/5647: #0: ffff88802e736e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff888074d5c088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88806abcd698 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88805d699190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1019 [inline] #3: ffff88805d699190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/5668: #0: ffff88807acae790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff888075c43488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff888030cc0a58 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff888071fe4190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1019 [inline] #3: ffff888071fe4190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 4 locks held by udevd/5670: #0: ffff88807acaec30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff88802850a088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff888028470a58 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff888071fe7190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1019 [inline] #3: ffff888071fe7190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 2 locks held by syz-executor/5902: #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6643 #1: ffffffff8e93df78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline] #1: ffffffff8e93df78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:976 1 lock held by syz-executor/5907: #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6643 1 lock held by syz-executor/5908: #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6643 1 lock held by syz-executor/5914: #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6643 1 lock held by syz-executor/5916: #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6643 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xff4/0x1040 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5416 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:stack_trace_consume_entry+0x0/0x280 kernel/stacktrace.c:83 Code: ce 7b 00 e9 6a ff ff ff e8 dd ae 3e 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 RSP: 0018:ffffc90000005f38 EFLAGS: 00000086 RAX: ffffffff813e9960 RBX: ffffc90000005f40 RCX: ffffffff917a7000 RDX: ffffffff91952801 RSI: ffffffff813e9960 RDI: ffffc90000006020 RBP: ffffc90000005fd0 R08: ffffc90000006ba0 R09: 0000000000000000 R10: ffffc90000005f90 R11: ffffffff81807a70 R12: ffff888026c1da00 R13: ffffffff81807a70 R14: ffffc90000006020 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c15f4d6e78 CR3: 000000007cc6a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_stack_walk+0x10e/0x150 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:257 [inline] __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4296 kmalloc_noprof include/linux/slab.h:878 [inline] dummy_urb_enqueue+0x7d/0x760 drivers/usb/gadget/udc/dummy_hcd.c:1271 usb_hcd_submit_urb+0x36c/0x1e80 drivers/usb/core/hcd.c:1533 __usb_hcd_giveback_urb+0x42c/0x6e0 drivers/usb/core/hcd.c:1650 dummy_timer+0x830/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1691 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1755 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1817 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1026 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1043 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1037 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:debug_object_activate+0xa3/0x510 lib/debugobjects.c:696 Code: f3 66 43 c7 44 35 0d f3 f3 43 c6 44 35 0f f3 48 8d 5c 24 70 ba 10 00 00 00 4c 89 e7 31 f6 e8 e4 c1 3e fd 48 89 d8 48 c1 e8 03 <48> 89 44 24 38 42 0f b6 04 30 84 c0 0f 85 a4 03 00 00 c7 44 24 70 RSP: 0018:ffffc90000006ca0 EFLAGS: 00000a02 RAX: 1ffff92000000da2 RBX: ffffc90000006d10 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000006d10 RBP: ffffc90000006db0 R08: ffffc90000006d0f R09: 0000000000000000 R10: ffffc90000006d00 R11: fffff52000000da2 R12: ffffc90000006d00 R13: 1ffff92000000d9c R14: dffffc0000000000 R15: ffff888024854b80 debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline] kvfree_call_rcu+0x99/0x790 kernel/rcu/tree.c:3800 cfg80211_update_known_bss+0xb45/0x1590 net/wireless/scan.c:1891 __cfg80211_bss_update+0x153/0x2030 net/wireless/scan.c:1938 cfg80211_inform_single_bss_data+0xd82/0x2090 net/wireless/scan.c:2329 cfg80211_inform_bss_data+0x3ce/0x5e70 net/wireless/scan.c:3184 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3279 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline] ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5138 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:784 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1037 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5138 Code: c9 50 e8 49 fc 0b 00 48 83 c4 08 4c 89 f7 e8 bd 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 b0 1a 65 0a e8 5b f6 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc RSP: 0018:ffffc9000331e428 EFLAGS: 00000282 RAX: 7309f7a4a3385800 RBX: ffff888026c1da00 RCX: ffffffff81709d8a RDX: dffffc0000000000 RSI: ffffffff8c0ad7c0 RDI: ffffffff8c60dd00 RBP: ffffc9000331e470 R08: ffffffff9424f7b7 R09: 1ffffffff2849ef6 R10: dffffc0000000000 R11: fffffbfff2849ef7 R12: 1ffff11017107ef4 R13: dffffc0000000000 R14: ffff8880b883e980 R15: ffff8880b883f7a0 context_switch kernel/sched/core.c:5267 [inline] __schedule+0x189b/0x4b50 kernel/sched/core.c:6607 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6929 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:virt_to_folio include/linux/mm.h:1300 [inline] RIP: 0010:virt_to_slab mm/slab.h:206 [inline] RIP: 0010:___cache_free+0x1e/0xe0 mm/slub.c:4638 Code: 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 41 56 53 49 89 d6 48 89 f3 49 89 ff 48 89 f7 e8 46 38 52 ff 48 c1 e8 06 <48> 83 e0 c0 48 ba 00 00 00 00 00 ea ff ff 48 8b 4c 10 08 f6 c1 01 RSP: 0018:ffffc9000331e808 EFLAGS: 00000206 RAX: 000000000172f150 RBX: ffff88805cbc5400 RCX: ffff888026c1da00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88805cbc5500 R08: ffffffff8142caec R09: ffffffff81fc5983 R10: dffffc0000000000 R11: fffffbfff2849ef7 R12: ffff88805cbc5400 R13: ffffea0000000000 R14: ffffffff81fc5983 R15: ffff88801ac41a00 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4086 [inline] slab_alloc_node mm/slub.c:4135 [inline] kmem_cache_alloc_node_noprof+0x16b/0x320 mm/slub.c:4187 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:587 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:678 alloc_skb include/linux/skbuff.h:1322 [inline] alloc_uevent_skb+0x74/0x230 lib/kobject_uevent.c:289 uevent_net_broadcast_untagged lib/kobject_uevent.c:326 [inline] kobject_uevent_net_broadcast+0x2fd/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:608 device_del+0x7db/0x9b0 drivers/base/core.c:3889 cdev_device_del+0x26/0xf0 fs/char_dev.c:580 evdev_disconnect+0x4c/0xb0 drivers/input/evdev.c:1397 __input_unregister_device+0x373/0x620 drivers/input/input.c:2275 input_unregister_device+0xa3/0x100 drivers/input/input.c:2511 imon_init_intf0 drivers/media/rc/imon.c:2289 [inline] imon_probe+0x264e/0x31b0 drivers/media/rc/imon.c:2434 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3682 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6d/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244