Extracting prog: 1h39m9.79230568s Minimizing prog: 20m18.180535191s Simplifying prog options: 0s Extracting C: 44.449743327s Simplifying C: 11m5.258974437s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETDEBUG-openat$tun-close-socket$nl_route-ioctl$SIOCSIFHWADDR-socket$kcm-socket$unix-ioctl$sock_SIOCGIFINDEX-setsockopt$sock_attach_bpf-sendmsg$kcm detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 4, 12, 18, 4, 2, 5, 8, 10, 11, 7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48) executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000500)=""/68, 0x44) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x28}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x5, 0x1, [0x2], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0x1, 0x4, 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x400, 0x1, 0xf7, 0xd3b, 0xeb, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xfd, 0x382}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x3, 0x4, {0x7, 0x25, 0x1, 0x8, 0xf, 0x9}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000e80)={{0x3, 0x2, 0x2, 0xd, 0x5}, 0x10c, [0x8, 0x7fffffff, 0xb081, 0x1, 0x7ff, 0x81, 0xfff, 0x0, 0x6, 0x7, 0x60000, 0x4c, 0x7, 0x2, 0x7, 0x0, 0x2, 0x8, 0x7, 0xdc8fb86e, 0x1, 0x7, 0xa91, 0x2, 0x1, 0x6, 0x7, 0x5, 0x7, 0xffffffff, 0x100, 0x1, 0x0, 0x744, 0x0, 0x9, 0x100, 0x580a, 0xa28, 0x9, 0x5, 0x4, 0xff, 0x3, 0xfc, 0xa, 0x1000, 0x58a0cacf, 0x180, 0xcd, 0x4, 0x80000000, 0x4, 0x66, 0x0, 0xffffff8a, 0x8, 0x5, 0x1, 0x80000001, 0xffffffff, 0x2, 0x4, 0x9, 0x200, 0x8, 0x7fff, 0x4, 0x189, 0xbc6, 0xf, 0x4, 0x323, 0x6, 0x9, 0x0, 0x2, 0xfb, 0xbf22, 0x401, 0x100, 0x8001, 0x961, 0x3ff, 0x1, 0x0, 0xc, 0x4, 0x3, 0x101, 0x9ff, 0x10, 0xfff, 0x7, 0x3ff, 0x80000000, 0x5943614a, 0x5, 0x5a, 0x5, 0x40, 0x8, 0xb4, 0x4, 0x0, 0x9, 0x10001, 0x1, 0x9, 0x6, 0x99f3, 0x1ff, 0xfffffffe, 0x4, 0x2, 0xb20, 0x80000000, 0x876f, 0x72a, 0xe, 0x400, 0x700, 0x78, 0x1000, 0x7, 0x9, 0x3, 0x9, 0x1, 0x5, 0x3, 0x1, 0x1800000, 0xf, 0x3, 0x1, 0x7, 0x88, 0x4ed, 0x1, 0x6, 0x74a, 0x7, 0x100, 0xd, 0x6, 0x10001, 0x3, 0x2, 0xe, 0x9, 0x2, 0x9, 0x9, 0x4, 0x5, 0x6, 0x1d, 0x80000001, 0xff, 0x80, 0x8001, 0x7, 0x6, 0x1ff, 0x1, 0x5, 0x2390, 0xa0, 0x8, 0xa, 0x3, 0x9, 0x4, 0x4, 0x2, 0x6, 0x5, 0x401, 0x200, 0x8a53, 0x0, 0x8, 0x0, 0x510, 0x448, 0x3, 0x641f68f2, 0xa, 0x7ff, 0x4, 0x2, 0x10000, 0x3, 0x5, 0x8, 0x1, 0x8928, 0x200, 0xf, 0x5, 0x712, 0x4, 0x3, 0x18, 0xe0000000, 0xd, 0x171a0c0f, 0xf0000000, 0x2, 0x800, 0x1, 0x1, 0x3, 0xaf, 0x5, 0x40, 0x800, 0x1, 0x52, 0x6, 0x8, 0x80000001, 0x2, 0x1, 0x5, 0xb, 0x7a, 0x7, 0x101, 0x4, 0x80000000, 0x80000001, 0xd5, 0x4, 0x3, 0x4, 0x7fffffff, 0x40, 0x2, 0x9, 0x8, 0x3, 0x1ff, 0x100, 0x80, 0xbc8, 0x3, 0xeb, 0x5, 0x6, 0xfffffff7, 0x81, 0x5, 0x2, 0x2, 0x6, 0x1ed00000, 0x81, 0x1, 0x2, 0x7, 0x35, 0x1b, 0x8001, 0x3, 0x7ba89f81, 0x5, 0x9, 0x26d, 0xb8, 0x3ff, 0x9, 0x4, 0x687c56d2, 0x5, 0x475e12b7, 0x12, 0x5, 0x100, 0x81, 0xf8f7, 0x1, 0x9, 0x80000000, 0x0, 0x800, 0x3, 0x80000000, 0x8, 0x5, 0x6, 0x6, 0x4, 0x5de, 0x6, 0x80000000, 0x0, 0x7, 0x3, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x2, 0xfffffffc, 0x2, 0x4, 0xc3c, 0x6, 0x101, 0x101, 0x4, 0xfffffff8, 0x3, 0x3, 0x100, 0xf, 0x592, 0xffff7fff, 0xe, 0x7d, 0x2, 0x9, 0xff, 0x0, 0x1, 0x9, 0x5, 0x2, 0x8, 0x6, 0x3, 0x5, 0x8000, 0x1, 0x1c, 0x5, 0xef9, 0x1ff, 0x5, 0x1, 0x8, 0x8, 0x10, 0x510beeb3, 0x4, 0x401, 0x101, 0x0, 0x4, 0x0, 0xd, 0x80000001, 0xffff, 0x9, 0x2, 0x5, 0x6, 0x9, 0x4, 0xbc, 0x5, 0xfc85, 0x1, 0x6, 0x2, 0x8, 0xf039, 0x1ff, 0xffffffff, 0x8, 0x8, 0x1, 0x5, 0x8, 0x9, 0x8, 0x1, 0x1, 0x3, 0xab0, 0x2, 0x0, 0x1, 0xaf5, 0x3, 0x9, 0x7, 0x7, 0xbf, 0x8, 0xed3, 0x80, 0x10, 0x6, 0x48ed, 0xdd72, 0x101, 0x3, 0x5, 0x8, 0xf7, 0x101, 0x3, 0xfffffffd, 0xc000000, 0x3, 0xffffff84, 0x8, 0x9, 0x8001, 0x3, 0x1, 0x7, 0x396, 0x9, 0x3, 0x3, 0x200, 0x9, 0x9, 0x2, 0xc, 0x7, 0x2, 0x5, 0x101, 0x8, 0x4, 0x3ff, 0x97b, 0x5, 0xd9, 0x10001, 0x0, 0x5, 0x1, 0x2, 0x80, 0x80000000, 0x9000000, 0x7, 0x5, 0x3, 0x3, 0x6, 0x9, 0x1, 0x1, 0xffffffff, 0x1, 0x7de, 0x6f2b, 0x520, 0x8, 0x80000001, 0x1, 0x4e8b, 0xfffffffc, 0x7, 0xec4, 0x0, 0x3, 0x7, 0x9a2, 0x7fffffff, 0xa91f, 0x4, 0x8, 0x100, 0x10, 0x953, 0x7ff, 0x4, 0x0, 0x4, 0x0, 0x0, 0x5, 0xb, 0x8, 0x9, 0x3, 0xfb, 0x7, 0xefe6, 0x8, 0x7, 0x0, 0x7, 0x7, 0x4, 0x0, 0x410d, 0x8001, 0x596, 0x3, 0x3, 0x7, 0xffff, 0xb09, 0x8, 0x4, 0x0, 0x8, 0x9, 0x1000, 0x1, 0x9, 0x80000000, 0x40, 0x8fc, 0x0, 0x400, 0x8, 0xbe4b, 0x3ff, 0x8, 0xffff7fff, 0x5, 0x3eeb, 0x561b, 0x5, 0x10, 0x7fff, 0xffffffff, 0x4, 0x81e, 0x3e2, 0x9, 0x824b, 0x10000, 0x3, 0x4, 0x80, 0x70, 0x4, 0x5, 0x4a, 0x66f, 0x2, 0xd, 0x9, 0x2, 0x7, 0xfff, 0x8000, 0x7, 0x7, 0x8, 0x0, 0x6, 0x7fffffff, 0x9, 0x3, 0x10001, 0xfffffff9, 0x56b0, 0x8, 0x5, 0x6, 0x3, 0x2, 0x9, 0x7, 0x8e8, 0x649, 0x53b1, 0x7, 0x5, 0xfffffff8, 0xc9, 0x4a, 0x3, 0x6, 0x1, 0x0, 0x2, 0x5, 0x80, 0x8001, 0x3, 0x8, 0x4, 0x8, 0xd1, 0xfffffffd, 0x8, 0xe8, 0x9, 0x3ff, 0x57e, 0x0, 0x2, 0x7, 0x7, 0x800, 0x8, 0x1, 0x6409, 0x9, 0x4dc, 0x5, 0x3ff, 0x3, 0x8, 0x200, 0x5, 0xffffffff, 0x3, 0x2, 0x9, 0x6, 0x8, 0x5, 0x1, 0xb7d, 0x0, 0x8001, 0xfe1, 0x10f, 0x0, 0x5, 0x3, 0x4, 0x24000000, 0x0, 0x4, 0x2, 0x5a9c, 0x9, 0x3, 0xe30, 0x40, 0x5, 0x2, 0xa, 0xfffffffe, 0x28, 0x3, 0x6f44, 0x1, 0x4, 0x6, 0xfffffffa, 0xffffffa6, 0x4, 0x6, 0x200, 0x7, 0x5, 0x800, 0xffff7a22, 0x8, 0xd21, 0x4, 0x3, 0xd7b, 0x10001, 0x8, 0xfffffff7, 0x4, 0xc60, 0x3, 0x10001, 0x4, 0x7, 0x200, 0x80, 0x6, 0x2, 0x10001, 0x3, 0x60db, 0x10000, 0x52, 0x8, 0x1000, 0x1, 0x953, 0x4, 0xf, 0x7, 0x3, 0x1, 0x89, 0x8, 0x1, 0x100, 0x7, 0x80000001, 0xfffffffa, 0x4, 0xfd2, 0xa5, 0x4871, 0x2, 0x0, 0xfe, 0x81, 0x8, 0x5, 0xfffffeff, 0x1, 0x38, 0x9, 0x0, 0x3, 0xdf0, 0x0, 0x1, 0xfff, 0x1000, 0x3, 0x25, 0x9, 0x1, 0xfffffff7, 0x8932, 0x6, 0x3ca, 0x1, 0xe6, 0xf834, 0xeb59, 0xffffffff, 0x0, 0xc0000000, 0x2, 0x100, 0x2, 0x0, 0xeb, 0x4, 0xa, 0x5, 0x7, 0x40, 0x3, 0x4, 0x2, 0x3, 0x1, 0x4d7, 0x1, 0x40, 0x8, 0x4, 0x7c, 0x4, 0x4, 0x90e, 0xb, 0x41f6, 0x80, 0xbab, 0x587, 0x4, 0x73, 0x3, 0x800, 0x4, 0xffffffff, 0x40, 0x800, 0x856, 0x4, 0xeb66, 0x7, 0x1, 0x3, 0x9, 0x9, 0x6, 0x6, 0x1, 0xf80, 0x8, 0x0, 0x0, 0x400, 0x15, 0xb, 0x0, 0x6, 0x2, 0x7, 0x8d, 0x7, 0x8, 0x5, 0x4, 0x1, 0x4, 0x10001, 0xed35, 0xfd08862c, 0x80000001, 0x3, 0xf5c, 0x10000, 0x0, 0x3, 0xd, 0x8, 0x0, 0xf73, 0x8, 0x2, 0x101, 0x5, 0x8, 0x0, 0x800, 0x6d26, 0x5, 0x7fff, 0xfffffff9, 0x800, 0x5, 0x1, 0x7, 0xf, 0x8, 0x5, 0x6, 0x432, 0x10, 0x9, 0xc, 0x1, 0x7, 0x2, 0x7, 0xd, 0x5, 0x80000001, 0xa, 0x8, 0x4, 0x8, 0x7, 0x0, 0x8001, 0xffffffc0, 0x400, 0x3, 0x0, 0x8, 0x2, 0x4, 0xfeb, 0xffffffff, 0xffffc181, 0x9, 0x0, 0x8, 0xffff2a5a, 0x6, 0x7, 0x1, 0x2, 0x2, 0x0, 0x8, 0x6, 0x3, 0x7f, 0x8, 0x3, 0x1, 0x5, 0x4, 0xfffffff9, 0x1, 0x2, 0x11, 0xfffffffd, 0x5, 0x7, 0x5, 0x2, 0x40, 0x4, 0x101, 0x2, 0x6, 0xc6f, 0x5, 0xec, 0x0, 0xb, 0x3, 0x235, 0x401, 0x5, 0x8, 0xfffffc00, 0x80000000, 0x7, 0x1, 0x2, 0x4, 0x200, 0x4, 0xe, 0x2f5, 0xfff, 0xcc66, 0x8001, 0x4640, 0x0, 0x10, 0x10001, 0x5, 0x2, 0xfff, 0x9, 0x1f, 0x3, 0x2, 0xfffffffb, 0x6f4, 0x10001, 0x8, 0x3ff, 0x8, 0x3, 0x9, 0x1000, 0x1, 0x7fffffff, 0x6, 0x3, 0xffffff36, 0x4, 0x9, 0x9, 0x81, 0xb91e, 0xfffffff9, 0x18c4f3b6, 0x8, 0x5, 0x135a, 0x5, 0x4, 0x8, 0x1, 0x44e5, 0x2f, 0x8, 0x1, 0x6, 0x401, 0x88, 0xc9c0, 0x33, 0xb, 0xc1, 0xfffffff9, 0x4, 0xe, 0x7f, 0x9, 0xfffffbbc, 0x23, 0xb3, 0x9, 0x5, 0x8, 0x8, 0x8000, 0x8, 0x4010, 0xfffffffb, 0xb, 0xc4a, 0x27f1, 0x8, 0x1, 0xfffffffc, 0x587c, 0x9, 0x28e03ad5, 0x0, 0xfffffffb, 0x57e71a9d, 0x1, 0x6, 0xfffffffd, 0x29, 0x7, 0xaf, 0x7, 0x6, 0xffff, 0x7fffffff, 0xc1, 0x1, 0x7, 0x1, 0x4, 0x1, 0x101, 0x5, 0x5, 0x24, 0xff, 0x8000, 0x8, 0x2, 0x2, 0x7, 0xd1e, 0x0, 0x5, 0x5, 0x3, 0x3, 0xfffffffe]}) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)={0x38, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x38}}, 0x39db77225c63fa4c) executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a0500"], 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a240103000302010209040100000102000009040101010102"], 0x0) syz_usb_connect(0x2, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff000000070501020800000705820308000107050302400000070584"], 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080) executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash bisect: split chunks (needed=true): <10>, <9> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 4, 13, 10, 14, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: split chunk #1 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5>, <5>, <4> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 8, 14, 4, 13, 10, 14, 12, 2, 4, 8, 10] detailed listing: executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 14, 4, 13, 10, 14, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 10, 14, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in corrupted bisect: the chunk can be dropped bisect: split chunk #2 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 12, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 12, 2, 4] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) program did not crash bisect: split chunks (needed=true): <3>, <2>, <3>, <2>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 29, 8, 14, 4, 13, 12, 2, 4, 8, 10] detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 29, 8, 14, 4, 13, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 8, 14, 4, 13, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 29, 14, 4, 13, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: split chunk #2 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 29, 8, 13, 12, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #3 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 29, 8, 13, 12, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #4 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 29, 8, 13, 12, 4, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2>, <1>, <1>, <1>, <1>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29, 8, 13, 12, 4, 10] detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 29, 8, 13, 12, 4, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #3 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #4 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #5 of len 1 into 2 parts bisect: no way to further split the chunk bisect: too many guilty chunks, aborting single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETDEBUG-openat$tun-close-socket$nl_route-ioctl$SIOCSIFHWADDR-socket$kcm-socket$unix-ioctl$sock_SIOCGIFINDEX-setsockopt$sock_attach_bpf-sendmsg$kcm detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 4, 12, 18, 4, 2, 5, 8, 10, 11, 7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48) executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000500)=""/68, 0x44) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x28}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x5, 0x1, [0x2], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0x1, 0x4, 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x400, 0x1, 0xf7, 0xd3b, 0xeb, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xfd, 0x382}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x3, 0x4, {0x7, 0x25, 0x1, 0x8, 0xf, 0x9}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000e80)={{0x3, 0x2, 0x2, 0xd, 0x5}, 0x10c, [0x8, 0x7fffffff, 0xb081, 0x1, 0x7ff, 0x81, 0xfff, 0x0, 0x6, 0x7, 0x60000, 0x4c, 0x7, 0x2, 0x7, 0x0, 0x2, 0x8, 0x7, 0xdc8fb86e, 0x1, 0x7, 0xa91, 0x2, 0x1, 0x6, 0x7, 0x5, 0x7, 0xffffffff, 0x100, 0x1, 0x0, 0x744, 0x0, 0x9, 0x100, 0x580a, 0xa28, 0x9, 0x5, 0x4, 0xff, 0x3, 0xfc, 0xa, 0x1000, 0x58a0cacf, 0x180, 0xcd, 0x4, 0x80000000, 0x4, 0x66, 0x0, 0xffffff8a, 0x8, 0x5, 0x1, 0x80000001, 0xffffffff, 0x2, 0x4, 0x9, 0x200, 0x8, 0x7fff, 0x4, 0x189, 0xbc6, 0xf, 0x4, 0x323, 0x6, 0x9, 0x0, 0x2, 0xfb, 0xbf22, 0x401, 0x100, 0x8001, 0x961, 0x3ff, 0x1, 0x0, 0xc, 0x4, 0x3, 0x101, 0x9ff, 0x10, 0xfff, 0x7, 0x3ff, 0x80000000, 0x5943614a, 0x5, 0x5a, 0x5, 0x40, 0x8, 0xb4, 0x4, 0x0, 0x9, 0x10001, 0x1, 0x9, 0x6, 0x99f3, 0x1ff, 0xfffffffe, 0x4, 0x2, 0xb20, 0x80000000, 0x876f, 0x72a, 0xe, 0x400, 0x700, 0x78, 0x1000, 0x7, 0x9, 0x3, 0x9, 0x1, 0x5, 0x3, 0x1, 0x1800000, 0xf, 0x3, 0x1, 0x7, 0x88, 0x4ed, 0x1, 0x6, 0x74a, 0x7, 0x100, 0xd, 0x6, 0x10001, 0x3, 0x2, 0xe, 0x9, 0x2, 0x9, 0x9, 0x4, 0x5, 0x6, 0x1d, 0x80000001, 0xff, 0x80, 0x8001, 0x7, 0x6, 0x1ff, 0x1, 0x5, 0x2390, 0xa0, 0x8, 0xa, 0x3, 0x9, 0x4, 0x4, 0x2, 0x6, 0x5, 0x401, 0x200, 0x8a53, 0x0, 0x8, 0x0, 0x510, 0x448, 0x3, 0x641f68f2, 0xa, 0x7ff, 0x4, 0x2, 0x10000, 0x3, 0x5, 0x8, 0x1, 0x8928, 0x200, 0xf, 0x5, 0x712, 0x4, 0x3, 0x18, 0xe0000000, 0xd, 0x171a0c0f, 0xf0000000, 0x2, 0x800, 0x1, 0x1, 0x3, 0xaf, 0x5, 0x40, 0x800, 0x1, 0x52, 0x6, 0x8, 0x80000001, 0x2, 0x1, 0x5, 0xb, 0x7a, 0x7, 0x101, 0x4, 0x80000000, 0x80000001, 0xd5, 0x4, 0x3, 0x4, 0x7fffffff, 0x40, 0x2, 0x9, 0x8, 0x3, 0x1ff, 0x100, 0x80, 0xbc8, 0x3, 0xeb, 0x5, 0x6, 0xfffffff7, 0x81, 0x5, 0x2, 0x2, 0x6, 0x1ed00000, 0x81, 0x1, 0x2, 0x7, 0x35, 0x1b, 0x8001, 0x3, 0x7ba89f81, 0x5, 0x9, 0x26d, 0xb8, 0x3ff, 0x9, 0x4, 0x687c56d2, 0x5, 0x475e12b7, 0x12, 0x5, 0x100, 0x81, 0xf8f7, 0x1, 0x9, 0x80000000, 0x0, 0x800, 0x3, 0x80000000, 0x8, 0x5, 0x6, 0x6, 0x4, 0x5de, 0x6, 0x80000000, 0x0, 0x7, 0x3, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x2, 0xfffffffc, 0x2, 0x4, 0xc3c, 0x6, 0x101, 0x101, 0x4, 0xfffffff8, 0x3, 0x3, 0x100, 0xf, 0x592, 0xffff7fff, 0xe, 0x7d, 0x2, 0x9, 0xff, 0x0, 0x1, 0x9, 0x5, 0x2, 0x8, 0x6, 0x3, 0x5, 0x8000, 0x1, 0x1c, 0x5, 0xef9, 0x1ff, 0x5, 0x1, 0x8, 0x8, 0x10, 0x510beeb3, 0x4, 0x401, 0x101, 0x0, 0x4, 0x0, 0xd, 0x80000001, 0xffff, 0x9, 0x2, 0x5, 0x6, 0x9, 0x4, 0xbc, 0x5, 0xfc85, 0x1, 0x6, 0x2, 0x8, 0xf039, 0x1ff, 0xffffffff, 0x8, 0x8, 0x1, 0x5, 0x8, 0x9, 0x8, 0x1, 0x1, 0x3, 0xab0, 0x2, 0x0, 0x1, 0xaf5, 0x3, 0x9, 0x7, 0x7, 0xbf, 0x8, 0xed3, 0x80, 0x10, 0x6, 0x48ed, 0xdd72, 0x101, 0x3, 0x5, 0x8, 0xf7, 0x101, 0x3, 0xfffffffd, 0xc000000, 0x3, 0xffffff84, 0x8, 0x9, 0x8001, 0x3, 0x1, 0x7, 0x396, 0x9, 0x3, 0x3, 0x200, 0x9, 0x9, 0x2, 0xc, 0x7, 0x2, 0x5, 0x101, 0x8, 0x4, 0x3ff, 0x97b, 0x5, 0xd9, 0x10001, 0x0, 0x5, 0x1, 0x2, 0x80, 0x80000000, 0x9000000, 0x7, 0x5, 0x3, 0x3, 0x6, 0x9, 0x1, 0x1, 0xffffffff, 0x1, 0x7de, 0x6f2b, 0x520, 0x8, 0x80000001, 0x1, 0x4e8b, 0xfffffffc, 0x7, 0xec4, 0x0, 0x3, 0x7, 0x9a2, 0x7fffffff, 0xa91f, 0x4, 0x8, 0x100, 0x10, 0x953, 0x7ff, 0x4, 0x0, 0x4, 0x0, 0x0, 0x5, 0xb, 0x8, 0x9, 0x3, 0xfb, 0x7, 0xefe6, 0x8, 0x7, 0x0, 0x7, 0x7, 0x4, 0x0, 0x410d, 0x8001, 0x596, 0x3, 0x3, 0x7, 0xffff, 0xb09, 0x8, 0x4, 0x0, 0x8, 0x9, 0x1000, 0x1, 0x9, 0x80000000, 0x40, 0x8fc, 0x0, 0x400, 0x8, 0xbe4b, 0x3ff, 0x8, 0xffff7fff, 0x5, 0x3eeb, 0x561b, 0x5, 0x10, 0x7fff, 0xffffffff, 0x4, 0x81e, 0x3e2, 0x9, 0x824b, 0x10000, 0x3, 0x4, 0x80, 0x70, 0x4, 0x5, 0x4a, 0x66f, 0x2, 0xd, 0x9, 0x2, 0x7, 0xfff, 0x8000, 0x7, 0x7, 0x8, 0x0, 0x6, 0x7fffffff, 0x9, 0x3, 0x10001, 0xfffffff9, 0x56b0, 0x8, 0x5, 0x6, 0x3, 0x2, 0x9, 0x7, 0x8e8, 0x649, 0x53b1, 0x7, 0x5, 0xfffffff8, 0xc9, 0x4a, 0x3, 0x6, 0x1, 0x0, 0x2, 0x5, 0x80, 0x8001, 0x3, 0x8, 0x4, 0x8, 0xd1, 0xfffffffd, 0x8, 0xe8, 0x9, 0x3ff, 0x57e, 0x0, 0x2, 0x7, 0x7, 0x800, 0x8, 0x1, 0x6409, 0x9, 0x4dc, 0x5, 0x3ff, 0x3, 0x8, 0x200, 0x5, 0xffffffff, 0x3, 0x2, 0x9, 0x6, 0x8, 0x5, 0x1, 0xb7d, 0x0, 0x8001, 0xfe1, 0x10f, 0x0, 0x5, 0x3, 0x4, 0x24000000, 0x0, 0x4, 0x2, 0x5a9c, 0x9, 0x3, 0xe30, 0x40, 0x5, 0x2, 0xa, 0xfffffffe, 0x28, 0x3, 0x6f44, 0x1, 0x4, 0x6, 0xfffffffa, 0xffffffa6, 0x4, 0x6, 0x200, 0x7, 0x5, 0x800, 0xffff7a22, 0x8, 0xd21, 0x4, 0x3, 0xd7b, 0x10001, 0x8, 0xfffffff7, 0x4, 0xc60, 0x3, 0x10001, 0x4, 0x7, 0x200, 0x80, 0x6, 0x2, 0x10001, 0x3, 0x60db, 0x10000, 0x52, 0x8, 0x1000, 0x1, 0x953, 0x4, 0xf, 0x7, 0x3, 0x1, 0x89, 0x8, 0x1, 0x100, 0x7, 0x80000001, 0xfffffffa, 0x4, 0xfd2, 0xa5, 0x4871, 0x2, 0x0, 0xfe, 0x81, 0x8, 0x5, 0xfffffeff, 0x1, 0x38, 0x9, 0x0, 0x3, 0xdf0, 0x0, 0x1, 0xfff, 0x1000, 0x3, 0x25, 0x9, 0x1, 0xfffffff7, 0x8932, 0x6, 0x3ca, 0x1, 0xe6, 0xf834, 0xeb59, 0xffffffff, 0x0, 0xc0000000, 0x2, 0x100, 0x2, 0x0, 0xeb, 0x4, 0xa, 0x5, 0x7, 0x40, 0x3, 0x4, 0x2, 0x3, 0x1, 0x4d7, 0x1, 0x40, 0x8, 0x4, 0x7c, 0x4, 0x4, 0x90e, 0xb, 0x41f6, 0x80, 0xbab, 0x587, 0x4, 0x73, 0x3, 0x800, 0x4, 0xffffffff, 0x40, 0x800, 0x856, 0x4, 0xeb66, 0x7, 0x1, 0x3, 0x9, 0x9, 0x6, 0x6, 0x1, 0xf80, 0x8, 0x0, 0x0, 0x400, 0x15, 0xb, 0x0, 0x6, 0x2, 0x7, 0x8d, 0x7, 0x8, 0x5, 0x4, 0x1, 0x4, 0x10001, 0xed35, 0xfd08862c, 0x80000001, 0x3, 0xf5c, 0x10000, 0x0, 0x3, 0xd, 0x8, 0x0, 0xf73, 0x8, 0x2, 0x101, 0x5, 0x8, 0x0, 0x800, 0x6d26, 0x5, 0x7fff, 0xfffffff9, 0x800, 0x5, 0x1, 0x7, 0xf, 0x8, 0x5, 0x6, 0x432, 0x10, 0x9, 0xc, 0x1, 0x7, 0x2, 0x7, 0xd, 0x5, 0x80000001, 0xa, 0x8, 0x4, 0x8, 0x7, 0x0, 0x8001, 0xffffffc0, 0x400, 0x3, 0x0, 0x8, 0x2, 0x4, 0xfeb, 0xffffffff, 0xffffc181, 0x9, 0x0, 0x8, 0xffff2a5a, 0x6, 0x7, 0x1, 0x2, 0x2, 0x0, 0x8, 0x6, 0x3, 0x7f, 0x8, 0x3, 0x1, 0x5, 0x4, 0xfffffff9, 0x1, 0x2, 0x11, 0xfffffffd, 0x5, 0x7, 0x5, 0x2, 0x40, 0x4, 0x101, 0x2, 0x6, 0xc6f, 0x5, 0xec, 0x0, 0xb, 0x3, 0x235, 0x401, 0x5, 0x8, 0xfffffc00, 0x80000000, 0x7, 0x1, 0x2, 0x4, 0x200, 0x4, 0xe, 0x2f5, 0xfff, 0xcc66, 0x8001, 0x4640, 0x0, 0x10, 0x10001, 0x5, 0x2, 0xfff, 0x9, 0x1f, 0x3, 0x2, 0xfffffffb, 0x6f4, 0x10001, 0x8, 0x3ff, 0x8, 0x3, 0x9, 0x1000, 0x1, 0x7fffffff, 0x6, 0x3, 0xffffff36, 0x4, 0x9, 0x9, 0x81, 0xb91e, 0xfffffff9, 0x18c4f3b6, 0x8, 0x5, 0x135a, 0x5, 0x4, 0x8, 0x1, 0x44e5, 0x2f, 0x8, 0x1, 0x6, 0x401, 0x88, 0xc9c0, 0x33, 0xb, 0xc1, 0xfffffff9, 0x4, 0xe, 0x7f, 0x9, 0xfffffbbc, 0x23, 0xb3, 0x9, 0x5, 0x8, 0x8, 0x8000, 0x8, 0x4010, 0xfffffffb, 0xb, 0xc4a, 0x27f1, 0x8, 0x1, 0xfffffffc, 0x587c, 0x9, 0x28e03ad5, 0x0, 0xfffffffb, 0x57e71a9d, 0x1, 0x6, 0xfffffffd, 0x29, 0x7, 0xaf, 0x7, 0x6, 0xffff, 0x7fffffff, 0xc1, 0x1, 0x7, 0x1, 0x4, 0x1, 0x101, 0x5, 0x5, 0x24, 0xff, 0x8000, 0x8, 0x2, 0x2, 0x7, 0xd1e, 0x0, 0x5, 0x5, 0x3, 0x3, 0xfffffffe]}) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)={0x38, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x38}}, 0x39db77225c63fa4c) executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a0500"], 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a240103000302010209040100000102000009040101010102"], 0x0) syz_usb_connect(0x2, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff000000070501020800000705820308000107050302400000070584"], 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080) executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 9, 1, 1, 12, 2, 2, 4, 8, 10] detailed listing: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}}, 0x0, 0x26}, 0x28) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000"/51], 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 3: r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r2, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5", 0x2}], 0x1) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 14, 4, 13, 10, 14, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 4, 13, 10, 14, 12] detailed listing: executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1e, 0x2, &(0x7f00000000c0)="3ccf") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffffffffffdee, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) executing program 2: bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0x5, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x220, 0x0, 0x0) executing program 2: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/62) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 29, 8, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 8, 12] detailed listing: executing program 3: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010102030109023f0002010080fa09040000020a00000007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x10, 0x96, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "fa58"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x1, 0x64}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x5, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x96}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4662b0e815cd00e8}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "d229de8e881ab99f516fb8955b8bdec3753250d64d9c52a2675a5d2dfcae1ab905fb6c8499bde75b3f0f343f268f46ace77022dedd49cec0c1505bccf2e318b1864781a3a64b4982cb0a0f2d0565344f8e82c85bb3a4a35e30c3fa533409cfef496cd804ab930b1dbc8adb77126822cc64c3d13b38bb903472d5a70b603fde1a1d3ad3cd5b44c25db56e9cd22240afa069be8e352d527ba90030dd2809850b974dc4cd735372664c4fd7d7d68bc893a916002508cad8b07a46e8b577cd00d298a86b6e0dc1977ec6168e6e773c52b39d014593295d68262fdd3b0fb3bcfe385313ccb6989b7722"}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "a5d0d51f06c5dfe058ceb09e42c2031324c239b4dd438a6d80e42e6322eb"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x70, {0x70, 0x2c, "95b2225fa85aba108ab80659d21cf733ecf921ab2e878b5eaf67027eb5245ead6a7412cca87a757ff2edcdfb2ec27630ffd3674d5551767f29e5125a7d01196af6a4809e3bd78ba455adad7e00f42c9a0f30881c3a71fbb2a879b6ca4a9b8565ce41d1e28ed169a8b2a0587a8052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0xc, "3636371202e8af5faf3bfd2d"}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x10, 0x28, "813d1603137b3564469db1a71ff21f424c07b2d9586b4b3290a06f4d4d1ec11d2c32172ade29d124"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe3, 0xb5, 0x81, 0x20, 0x2c42, 0x16f8, 0x1efa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf5, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0xd6, 0x46, 0x1, 0x7d, 0x67, 0xed, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001400)={0x0, 0x0, 0x6, "da2eaaea7613"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(r4) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000001040)={0x0, 0x6, 0xc2, {0xc2, 0x10, "e9088ba3f8250432e749e8fcacf513222a57f6291e0749f3b765f919abc624e30d04af511636194e06d26cc7456b96e754de7380056c6b7de635067015ad559d0471106b3e467f28fd860c1d7b50de63421361df6b595839c0ebb2af0065daf0a128237ece5aeae52e00c8faabe1100ea9d34ccefcea156f3a0dca8223398b52789e6c7b8090e4612f6a35085f9705d34c77c5b623b6a649cc975f3245f312ab2eacbc9b1297ae9f0d0e9784ef3724408674b5ed8a8be517f8ca5ed57afd4b94"}}, &(0x7f0000001140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "bef06958cdc00a59caa9bb4cdd95d4d69a5db28b3d01f616dc51926e88d09bd648aa5fe0f971d9dc58d4a0057d31610dc5f362d0d7f2a5ba41d5c96dbdea318cd79ccc27624813cef82a9b0d55ebccae6b859746d2d71fb702fe9fa37dd81074d52e37c8d6ae35f3b2c721a2bdc10721f28173ad7217e2cb37acc0aec58396801f6b76125c44ad39f4488d6cfaeeabb2cc3e221b593ba6ee313cae27e5104db13b222ba7fcafc570edbc3ff3f74c3f55fba78e4e9ec2bf4c48243324f585fbc3356740f43c27dbba370397faab9015"}}, &(0x7f0000001240)={0x0, 0xf, 0xcd, {0x5, 0xf, 0xcd, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x1, 0x2, 0x8000, 0x7}, @generic={0xba, 0x10, 0x4, "79207956c6a24d495371280896079f06391a91226324a3626fbbfcb5072aafb801e3761f9d01ad067daccdae234746e3df9f37e77999ce10e953b6f4eb17fa18993de89a6c34bc600c4515ada123cb85632ad9ca0d74dc4129629bd5ba87b6ff96deb59b599869ecdb4ebac898fc1d06f0c8abcc1d32521246b671b98544f28e6bb36fab1bd3d87b00f2279049c7c58ee3d05c000d02739b8810ba3295f89de6d0b7ff256b0356e89c015367051e0f2e55fa2ed990a015"}, @ptm_cap={0x3}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xec, 0x33, "4d76fbac", "d508090b"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x90, 0x2, 0x6, 0x5}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0xf, 0x9e, "fbb68f90b36391257083dec3a1a7038220961d7cc18d992d03f9748e482ccce1d26ea72c43b6fc34f3f98f57fc5be0e3587b8e3e45f5111ebe470d943d68a00484a37f54e165cb0a365d57da4a51413bd64354943198cd7e360cd31de7b34f5b8d9af49140d95a8f80c82de029516997f44f9a288bc68e0c2e6b1a567736b6a500545f163f830d7893bcd5bb954e34f852667f9c846255164293b3abc887"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001940)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1ef0]}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "aaba"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "149b"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x0, 0x6, 0x98, {0x98, 0x0, "b8ca80d6260402e7a3da150a7590354b49681618630e5b772e02af31c8a9a1acb67df660727bfd4de5103f269df6db41595919e30f5ed367cc5d787015a978e1d4629ebbff00520874c873ba74823c12a3a1307c55f41083e137acb08849c3c7d55e960b609cd9f971309ebf14af722e753521a881607723349fadd297552e673448c3e11729c79622fe3b0291d6730fad7a13a01769"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "78562c17390f3623e737f72034393539191034ddc462ad48f3db015b5b31f4318924d7b62d3eac8784dc61c06dd84dadc5081f78f7955d1ad4e7b8ef67e384100bc1a1df4dc7fa20a722"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0xdd, "4dd1bcad7b8abda3efa5f5a0f75b426b3e873185211b7724ef928bdde7b263f5b69facfbf21b4222b92f04578374444a12ba5d3553be7643690a806efa9c1d8a3a6567394c9dae06dce97a67e8fbbfcaeda086f8a26810d283f993eac752621bb24905ccb7bc6e1c2659df393934c79e1caeffc471d389d84c9c1ad7a14e0e5b4de169a98429c2515c393c3c89f69f721a6c79d75193793cf0d574bcd6ef8b143d4f2bc155846ad61dd07dcc1a9814c928536adb0ea4ade8d4235471968fe40860cbc761fb23becb56a07fbddfd19328a932755a75869383412740a47e"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x65e4}, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 12] detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 12] detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x0, {0x1}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0xf0, 0x1}, {0x2, 0xff}, 0x2, 0xfd}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 12] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) program did not crash minimized 7 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x2) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 0] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: program crashed: BUG: sleeping function called from invalid context in mmc_free_host minimized 12 calls -> 0 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: concatenation succeeded found reproducer with 4 syscalls minimizing guilty program testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=1m29.460184852s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host simplifying C reproducer testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program did not crash testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m29.460184852s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true reproducing took 2h16m17.535195039s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: bb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 a1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fb6b RBX: ffffffff819bcc20 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e416437 RDI: ffffffff8c6dad80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc900001a0000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 303e6507e3fd2200 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffff88801e68dde0 R08: 0000000000000100 R09: 0000000000000001 R10: dffffc0000000000 R11: fffff520001430b9 R12: 1ffff9200014314c R13: ffff88805aad0b28 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a7416227a0 CR3: 000000005aa76000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f drivers/base/core.c:-1 device_release+0xc4/0x1f0 drivers/base/core.c:-1 ---------------- Code disassembly (best guess): 0: bb 87 02 c3 cc mov $0xccc30287,%ebx 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d d3 a1 22 00 verw 0x22a1d3(%rip) # 0x22a1fb 28: fb sti 29: f4 hlt * 2a: e9 8c 08 03 00 jmp 0x308bb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/1/0: 1, last CPU#1: #0: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: bb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 a1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 RAX: 000000000004fb6b RBX: ffffffff819bcc20 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e416437 RDI: ffffffff8c6dad80 RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc900001a0000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#1: swapper/1/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#1: swapper/1/0 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 303e6507e3fd2200 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffff88801e68dde0 R08: 0000000000000100 R09: 0000000000000001 R10: dffffc0000000000 R11: fffff520001430b9 R12: 1ffff9200014314c R13: ffff88805aad0b28 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a7416227a0 CR3: 000000005aa76000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f drivers/base/core.c:-1 device_release+0xc4/0x1f0 drivers/base/core.c:-1 ---------------- Code disassembly (best guess): 0: bb 87 02 c3 cc mov $0xccc30287,%ebx 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d d3 a1 22 00 verw 0x22a1d3(%rip) # 0x22a1fb 28: fb sti 29: f4 hlt * 2a: e9 8c 08 03 00 jmp 0x308bb <-- trapping instruction 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop