Extracting prog: 3m13.39250938s
Minimizing prog: 19m30.585771169s
Simplifying prog options: 0s
Extracting C: 38.976199425s
Simplifying C: 14m13.537395728s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-write$proc_mixer-syz_open_dev$video-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
syz_open_dev$video(0x0, 0x0, 0x10b200)
r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 4, 25, 10, 3, 6, 28, 28, 26, 3, 30, 18, 24, 8, 30, 29, 3, 15, 3, 15, 30, 3, 26, 30, 6, 25, 10, 16, 28]
detailed listing:
executing program 0:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x20, 0x68, 0x400, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x3d}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018224500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000208000000003300020900"], 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500282cfffe8000000000000000000000000000bbfe8000"/50], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)={0x44, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x32, 0x124, 0x0, 0x0, @str='09\xfb\'\x14Z\x86\x98\xa0\xca$s\xef!\x92\xf3\xd4W\x9d\xc1\xe3\x89\xa7[_e$>&X\xe4\xe9Ym\xa4\x93\"\xf2\xbdM\xad]*\xbd4.'}]}, 0x44}], 0x1}, 0x4000880)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000070000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000183100000300000000000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
close(r3)
r5 = getpid()
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r6, &(0x7f0000000e00)='1m', 0x2, 0x200048d0, &(0x7f0000000e40)={0x2, 0x4e23, @empty}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a00010000004000000000000a0003954ae6a7", @ANYRES32=0x0, @ANYBLOB="04000004140003000700000005000000000000000000000014000100ff010000000000000000000000000001"], 0x44}}, 0x4800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r7, &(0x7f0000000180)={r8, r3, 0x10000})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x5, 0xffffffffffffffff, 0x80000})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
executing program 2:
syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00')
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0)
pread64(r4, &(0x7f00000002c0)=""/124, 0x7c, 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x2040, 0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000004a40)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000004a80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x0, 0x6838, 0x3ff, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r11)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00')
pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000005000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008010)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="f78d9ca38f", 0x5}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20004000)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001440)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0xe, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20048881)
creat(&(0x7f00000001c0)='./file0\x00', 0x40)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x4002)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200f03000000b3e71be4f8f3d5129d0823d2bba5de0a07d792bbcfb972e972973e412826ba840b000093"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100a3cd9bc3000009f6010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b04001280140000001100010040000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r8 = syz_open_dev$hiddev(&(0x7f0000000140), 0x2, 0x4c8880)
ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, &(0x7f0000000400)={{0x1, 0x3, 0x4, 0x4, 0xfffffffb, 0x5}, 0x11a, [0xffffffc0, 0x0, 0x10f, 0x0, 0xd2c4, 0xb5, 0x4, 0x6, 0x80000001, 0xe1, 0x9, 0x2b809c27, 0x7fffffff, 0x5cce848e, 0x1ff, 0xffff8000, 0x1, 0x8, 0x10, 0x100, 0x6, 0x200, 0x0, 0x5, 0xb, 0x9, 0x8, 0x6, 0x6, 0x3, 0x9, 0x400, 0x8, 0x3, 0x609, 0x7ff, 0x9, 0xffff8001, 0xe9d4, 0x7fffffff, 0x3ff, 0x4, 0x100, 0x3e, 0x10, 0x2, 0x10, 0x4, 0x5, 0xfffffffe, 0x4, 0x80000000, 0x0, 0x8, 0xfffffffe, 0xbf, 0x4, 0x17, 0x4, 0x631, 0x4, 0x6, 0x0, 0x9, 0x10000, 0xc, 0x7, 0x0, 0x6, 0x1, 0x81, 0x7ff, 0xf60, 0x80000001, 0x7ff, 0x80000001, 0x638, 0x9, 0x2, 0x63, 0x70000000, 0xfffffff7, 0x1ff, 0xa, 0x8, 0x75, 0x5, 0x10, 0x8d, 0x80, 0x8, 0x0, 0x17, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x7fffffff, 0xa, 0x1000, 0x100, 0xfffffff6, 0x2, 0xeb, 0x2, 0xfff, 0x0, 0x6, 0xb, 0x47f1, 0xffffffff, 0x6, 0x7a6, 0x1, 0x0, 0x4, 0x3, 0xe46, 0x7, 0x911, 0x9, 0x9, 0x8001, 0x9, 0x8, 0x1000, 0x5cb1, 0x8, 0x7, 0x8001, 0x1, 0xd, 0x9, 0x14, 0x8001, 0x4, 0x9, 0x912, 0x3, 0x1000, 0x7, 0x3, 0xb, 0xe, 0x2, 0x6, 0x7, 0x2, 0x3ff, 0x0, 0x7, 0x6, 0x81, 0x9, 0xb7, 0x8, 0x9, 0x101, 0x1, 0x4, 0xf8, 0x7, 0xe4, 0x4, 0x8, 0x9, 0x4, 0x3, 0x21ff, 0x2, 0x6, 0x6, 0x80000001, 0x9, 0xa, 0x4, 0xc55, 0x1, 0xffff, 0x3, 0x5, 0x3, 0x7ff, 0x3, 0x3, 0x155, 0x2, 0xf, 0x5, 0x3, 0x7, 0x932d, 0x0, 0x1, 0xc2, 0xa, 0x6, 0x9, 0x9, 0xffffffff, 0xfffffc01, 0xa, 0xf83, 0x1, 0x800, 0xe, 0x80000000, 0x8001, 0x80000001, 0x5, 0x5, 0x3ff, 0xffffff00, 0x95cd, 0x340, 0x5, 0x9, 0x1, 0x321, 0x9, 0xffffffff, 0x80000000, 0xf6, 0x3, 0x45cb, 0x1ff, 0xffffffff, 0x7, 0xb2, 0x8, 0x4, 0x401, 0x5bb, 0x2, 0xdb, 0x6, 0x8, 0xfffffbff, 0x6, 0x4, 0x70, 0x6, 0x3, 0x9, 0x3, 0x6, 0x3, 0x7, 0x2, 0x0, 0x0, 0x2b, 0x8, 0x6, 0xe3b, 0xffff0000, 0x4, 0x21f5e983, 0xd36b, 0x5, 0x6, 0x2, 0x3, 0x9, 0x1ff, 0x7, 0x5, 0x2, 0x7, 0x80000000, 0x4, 0xff, 0x9, 0x0, 0x1000, 0x2, 0x9, 0x5, 0x2, 0x10000, 0x4d, 0x6, 0x2, 0x9, 0x5, 0x8, 0xe4c, 0xffffffff, 0x6, 0x8, 0x4, 0xcb1, 0x800, 0x9, 0x4, 0x7, 0x0, 0x23, 0x9, 0x0, 0x3, 0x7, 0x8001, 0x7fffffff, 0x3, 0x3, 0x0, 0x60f8ca4d, 0x6, 0xab, 0x7, 0xfffffe99, 0x6, 0x3, 0xb68, 0x6, 0xfff, 0x7, 0x3, 0xfffffffd, 0x3, 0x400, 0x10, 0x80000000, 0xaff, 0x8, 0x6, 0x400, 0x1, 0x1, 0x4, 0x7ff, 0xfffffffa, 0xd98, 0x1, 0x1, 0x80000000, 0x7fff, 0x40, 0x10000, 0x7, 0x10, 0x3, 0x3, 0x2, 0xae, 0x1, 0x80, 0x8, 0x7, 0x400, 0x0, 0x2, 0x10000, 0x4, 0xfffffffb, 0x7fff, 0xd1aa, 0xc, 0x4, 0x2114a4e1, 0xfffffffe, 0x3, 0x0, 0x3, 0x80, 0x4, 0x5, 0x7f, 0x1973, 0x825a, 0x4, 0x44b5db65, 0x101, 0xa, 0x40, 0x82, 0xe574, 0xe2d, 0x9, 0x2, 0xb, 0x7ff, 0x0, 0x7, 0x8, 0x0, 0x0, 0x8, 0x1, 0x9, 0xb, 0xb, 0x4a8e14f8, 0x7, 0x2, 0xfffffffd, 0x7, 0x100, 0x2, 0x20, 0x0, 0x2, 0x2, 0x3, 0x7, 0x7, 0x1000, 0x5, 0x4, 0x0, 0x1ff, 0x8, 0x8001, 0x5, 0x80, 0x1, 0x3, 0x4, 0x80000000, 0x3d9, 0x80000001, 0xdb7, 0x2, 0x3, 0x280000, 0x3, 0x9, 0x9, 0x100, 0xffffffff, 0x4, 0x9197, 0xc, 0x5, 0x1, 0x0, 0x10000, 0x43, 0x7, 0xfffffff7, 0x8, 0xffffffff, 0x517, 0x1, 0x1, 0x5, 0x1, 0x401, 0x3, 0x7, 0x5, 0x80, 0x7, 0x9, 0xe0000000, 0xb66, 0x3, 0x8, 0x3, 0x0, 0x0, 0x80000000, 0x6, 0x10, 0x3, 0xc0000, 0x8001, 0x8, 0x8001, 0xda4, 0x19a7, 0x0, 0xbbaf, 0x9e6, 0x7ff, 0x7, 0x2, 0xb98, 0xf, 0xfff, 0xfffffff8, 0xd7c, 0x7, 0x9, 0x0, 0x32, 0x6, 0x4, 0x4, 0xd1, 0x1, 0xa7, 0x1000, 0x6, 0x5, 0x2, 0x2, 0x10001, 0x6, 0x1, 0x6, 0x300000, 0x5, 0x4e59, 0xd89, 0x800, 0x4, 0x9, 0xd8, 0xc, 0x0, 0x7f, 0x9, 0x1, 0x3, 0x1, 0xcfcf, 0xc, 0xa8fb, 0x4, 0x8, 0x6, 0x7fffffff, 0x6, 0x8, 0x7, 0x6, 0xb25, 0x10000, 0x7, 0x8, 0x81, 0x7, 0x1, 0x7ff, 0x6, 0x80, 0x367, 0xbfa, 0x0, 0x2, 0x7, 0xef15, 0x34a, 0x7, 0x37bb, 0x1, 0x100, 0x0, 0x0, 0xd, 0x5, 0x3, 0x8, 0x0, 0x4c, 0x0, 0x1, 0xfffffffd, 0x2, 0x0, 0x7, 0x6, 0x20b, 0x8, 0x632, 0x80000000, 0x3ff, 0x4, 0x2, 0x0, 0xa7, 0x5, 0x7f, 0x4, 0x7fff, 0x7b7, 0x81, 0xc, 0x6, 0x1a6, 0x80000000, 0x3, 0x0, 0xffffffff, 0x7, 0x6, 0x8, 0xfffffffa, 0x600, 0x4, 0x23, 0xfffffff7, 0x3, 0x4, 0x1ff, 0xf47, 0x40, 0xfffffff8, 0x57a, 0x6, 0x8, 0x8, 0xfffffffa, 0x76315a73, 0x8, 0x0, 0x7, 0xd, 0x3, 0x1, 0x0, 0x1, 0x0, 0x80, 0x7, 0x8, 0xe82, 0x0, 0x5, 0x1, 0x5d8, 0xa1a, 0xca76, 0x0, 0xd653, 0xba59, 0x10001, 0x4, 0x9, 0xe63, 0xe1c5, 0x43f4de46, 0x10000, 0x7, 0x2, 0x5, 0x3, 0x6, 0x55, 0xfac, 0x1, 0x5, 0x8, 0xddc, 0x3, 0x6, 0x1, 0x1, 0x0, 0x49a4, 0x6, 0x8, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x10001, 0xd3b, 0x0, 0x3, 0x4, 0xfffff77a, 0x4, 0x9858, 0xd, 0x200, 0x8, 0x23, 0x800, 0x1, 0x10, 0x7, 0x5, 0xfffff4d5, 0x6, 0x50a, 0x8001, 0xb, 0x369, 0x6, 0x9, 0x800, 0xe, 0x1, 0x9, 0x200, 0x3, 0xfffffffe, 0x2, 0xb, 0x5, 0xfffffffc, 0x3, 0x7, 0xffffff27, 0x3, 0x80000000, 0x4, 0x5, 0x7, 0x3, 0x0, 0x100000, 0x81, 0x4, 0x26, 0x4, 0x3, 0x2, 0x7, 0x6, 0x40, 0xe, 0x6, 0x5, 0x4, 0x68, 0x7, 0x8001, 0x0, 0x0, 0x8, 0x5, 0x80000000, 0x401, 0x81, 0x3, 0xb, 0x80, 0x4, 0x4, 0x0, 0x7, 0x3, 0xfffffc00, 0x4, 0x800, 0x401, 0xffffffdf, 0xfff000, 0x1ff, 0x81, 0x3, 0x8, 0x8, 0x2, 0x7ff, 0x3, 0x81, 0x8, 0x6, 0x1, 0xfffffffa, 0xc, 0x5, 0x8, 0x5, 0x10000, 0x5, 0xfffffff9, 0x0, 0x3, 0xfffffffd, 0x2, 0x8001, 0x4, 0x9, 0x5, 0x7, 0x8, 0x6, 0x0, 0x9, 0x1, 0xfffffff8, 0x100, 0x4d5, 0x3, 0x9, 0x9, 0x80000001, 0x401, 0x1000, 0x8, 0x0, 0x1, 0xe, 0x2, 0x9a9, 0x0, 0x1, 0x5, 0x2, 0xffff, 0xa, 0xfffffff8, 0xeed, 0x236, 0x10001, 0x5, 0x3ff, 0xe07, 0x9, 0x7, 0x99, 0xfffffff7, 0x493f, 0x7ff, 0x6, 0x2, 0x3, 0x2, 0x7, 0x4b6a1844, 0x13, 0x10, 0x2, 0x10, 0xfffffff9, 0x7, 0x2, 0x9, 0x9, 0x6, 0x7fffffff, 0x2, 0x5, 0x7, 0x0, 0x10000, 0x2, 0x3ff, 0x100, 0x5, 0xadf, 0x6, 0xd8ca, 0x3, 0xfffffff7, 0x0, 0x3, 0x0, 0x5, 0x9, 0xb, 0x3, 0x388f, 0x4, 0xb8, 0xffffffff, 0x341, 0x1000, 0x2, 0x51, 0x3, 0x0, 0xc, 0x400, 0x5, 0x0, 0x2, 0x7, 0x7, 0x8, 0x3, 0x0, 0x0, 0x2, 0x80000000, 0x1000, 0xad, 0x5, 0xfffffff3, 0x80, 0x3, 0x0, 0x9, 0x979, 0x9, 0x2, 0x200, 0x0, 0x6, 0x7f, 0x200, 0x100, 0x2, 0x68e, 0x0, 0x4, 0x9, 0x8, 0x1, 0x3ff, 0x9, 0xe, 0xd376, 0x2, 0x7, 0x8, 0xc, 0xfff, 0xdb44, 0xea9d, 0x10001, 0x6, 0x1c, 0x9, 0x3, 0x7, 0x23c3, 0x7, 0x6, 0x5, 0x3, 0x6, 0x0, 0x4, 0x5, 0x10001, 0x6b, 0xbdf6, 0x4, 0x7f, 0xdb7, 0x80000000, 0x2, 0x0, 0x3, 0x5, 0x5, 0x2, 0x2, 0x1b8f, 0x4, 0xeb9, 0x0, 0x25, 0x7, 0x4, 0x8, 0x0, 0x82, 0x1, 0x1000, 0x80, 0xb1aa, 0xd9, 0xfffffffc, 0xffffffff, 0x6, 0x4, 0x4, 0xf0, 0xb9, 0x2, 0x73, 0x1, 0x7, 0x1, 0x3c7, 0x1, 0x6, 0x6, 0xfffffffe, 0x4, 0x100, 0x395, 0x446, 0x5, 0x6, 0xff, 0x4, 0x2, 0x7, 0x80000000, 0x0, 0x18b, 0xffff, 0x0, 0x3, 0x0, 0x5, 0x81, 0x23, 0x0, 0x8, 0x2, 0x4, 0x6, 0x4, 0x7, 0x97f, 0x6, 0x4, 0x2, 0x7, 0x7ff, 0x4, 0x6, 0xc, 0x7f2f, 0x10, 0x3, 0x8, 0x6, 0x9, 0x8, 0x0, 0x2, 0x101, 0xffff7a46, 0x7, 0xfffffffa, 0x101, 0x0, 0x0, 0x1fc0, 0x8]})
executing program 4:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008010)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) (fail_nth: 3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100a3cd9bc3000009f6010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b04001280140000001100010040000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x2, 0x4c8880)
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000400)={{0x1, 0x3, 0x4, 0x4, 0xfffffffb, 0x5}, 0x11a, [0xffffffc0, 0x0, 0x10f, 0x0, 0xd2c4, 0xb5, 0x4, 0x6, 0x80000001, 0xe1, 0x9, 0x2b809c27, 0x7fffffff, 0x5cce848e, 0x1ff, 0xffff8000, 0x1, 0x8, 0x10, 0x100, 0x6, 0x200, 0x0, 0x5, 0xb, 0x9, 0x8, 0x6, 0x6, 0x3, 0x9, 0x400, 0x8, 0x3, 0x609, 0x7ff, 0x9, 0xffff8001, 0xe9d4, 0x7fffffff, 0x3ff, 0x4, 0x100, 0x3e, 0x10, 0x2, 0x10, 0x4, 0x5, 0xfffffffe, 0x4, 0x80000000, 0x0, 0x8, 0xfffffffe, 0xbf, 0x4, 0x17, 0x4, 0x631, 0x4, 0x6, 0x0, 0x9, 0x10000, 0xc, 0x7, 0x0, 0x6, 0x1, 0x81, 0x7ff, 0xf60, 0x80000001, 0x7ff, 0x80000001, 0x638, 0x9, 0x2, 0x63, 0x70000000, 0xfffffff7, 0x1ff, 0xa, 0x8, 0x75, 0x5, 0x10, 0x8d, 0x80, 0x8, 0x0, 0x17, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x7fffffff, 0xa, 0x1000, 0x100, 0xfffffff6, 0x2, 0xeb, 0x2, 0xfff, 0x0, 0x6, 0xb, 0x47f1, 0xffffffff, 0x6, 0x7a6, 0x1, 0x0, 0x4, 0x3, 0xe46, 0x7, 0x911, 0x9, 0x9, 0x8001, 0x9, 0x8, 0x1000, 0x5cb1, 0x8, 0x7, 0x8001, 0x1, 0xd, 0x9, 0x14, 0x8001, 0x4, 0x9, 0x912, 0x3, 0x1000, 0x7, 0x3, 0xb, 0xe, 0x2, 0x6, 0x7, 0x2, 0x3ff, 0x0, 0x7, 0x6, 0x81, 0x9, 0xb7, 0x8, 0x9, 0x101, 0x1, 0x4, 0xf8, 0x7, 0xe4, 0x4, 0x8, 0x9, 0x4, 0x3, 0x21ff, 0x2, 0x6, 0x6, 0x80000001, 0x9, 0xa, 0x4, 0xc55, 0x1, 0xffff, 0x3, 0x5, 0x3, 0x7ff, 0x3, 0x3, 0x155, 0x2, 0xf, 0x5, 0x3, 0x7, 0x932d, 0x0, 0x1, 0xc2, 0xa, 0x6, 0x9, 0x9, 0xffffffff, 0xfffffc01, 0xa, 0xf83, 0x1, 0x800, 0xe, 0x80000000, 0x8001, 0x80000001, 0x5, 0x5, 0x3ff, 0xffffff00, 0x95cd, 0x340, 0x5, 0x9, 0x1, 0x321, 0x9, 0xffffffff, 0x80000000, 0xf6, 0x3, 0x45cb, 0x1ff, 0xffffffff, 0x7, 0xb2, 0x8, 0x4, 0x401, 0x5bb, 0x2, 0xdb, 0x6, 0x8, 0xfffffbff, 0x6, 0x4, 0x70, 0x6, 0x3, 0x9, 0x3, 0x6, 0x3, 0x7, 0x2, 0x0, 0x0, 0x2b, 0x8, 0x6, 0xe3b, 0xffff0000, 0x4, 0x21f5e983, 0xd36b, 0x5, 0x6, 0x2, 0x3, 0x9, 0x1ff, 0x7, 0x5, 0x2, 0x7, 0x80000000, 0x4, 0xff, 0x9, 0x0, 0x1000, 0x2, 0x9, 0x5, 0x2, 0x10000, 0x4d, 0x6, 0x2, 0x9, 0x5, 0x8, 0xe4c, 0xffffffff, 0x6, 0x8, 0x4, 0xcb1, 0x800, 0x9, 0x4, 0x7, 0x0, 0x23, 0x9, 0x0, 0x3, 0x7, 0x8001, 0x7fffffff, 0x3, 0x3, 0x0, 0x60f8ca4d, 0x6, 0xab, 0x7, 0xfffffe99, 0x6, 0x3, 0xb68, 0x6, 0xfff, 0x7, 0x3, 0xfffffffd, 0x3, 0x400, 0x10, 0x80000000, 0xaff, 0x8, 0x6, 0x400, 0x1, 0x1, 0x4, 0x7ff, 0xfffffffa, 0xd98, 0x1, 0x1, 0x80000000, 0x7fff, 0x40, 0x10000, 0x7, 0x10, 0x3, 0x3, 0x2, 0xae, 0x1, 0x80, 0x8, 0x7, 0x400, 0x0, 0x2, 0x10000, 0x4, 0xfffffffb, 0x7fff, 0xd1aa, 0xc, 0x4, 0x2114a4e1, 0xfffffffe, 0x3, 0x0, 0x3, 0x80, 0x4, 0x5, 0x7f, 0x1973, 0x825a, 0x4, 0x44b5db65, 0x101, 0xa, 0x40, 0x82, 0xe574, 0xe2d, 0x9, 0x2, 0xb, 0x7ff, 0x0, 0x7, 0x8, 0x0, 0x0, 0x8, 0x1, 0x9, 0xb, 0xb, 0x4a8e14f8, 0x7, 0x2, 0xfffffffd, 0x7, 0x100, 0x2, 0x20, 0x0, 0x2, 0x2, 0x3, 0x7, 0x7, 0x1000, 0x5, 0x4, 0x0, 0x1ff, 0x8, 0x8001, 0x5, 0x80, 0x1, 0x3, 0x4, 0x80000000, 0x3d9, 0x80000001, 0xdb7, 0x2, 0x3, 0x280000, 0x3, 0x9, 0x9, 0x100, 0xffffffff, 0x4, 0x919b, 0xc, 0x5, 0x1, 0x0, 0x10000, 0x43, 0x7, 0xfffffff7, 0x8, 0xffffffff, 0x517, 0x1, 0x1, 0x5, 0x1, 0x401, 0x3, 0x7, 0x5, 0x80, 0x7, 0x9, 0xe0000000, 0xb66, 0x3, 0x8, 0x3, 0x0, 0x0, 0x80000000, 0x6, 0x10, 0x3, 0xc0000, 0x8001, 0x8, 0x8001, 0xda4, 0x19a7, 0x0, 0xbbaf, 0x9e6, 0x7ff, 0x7, 0x2, 0xb98, 0xf, 0xfff, 0xfffffff8, 0xd7c, 0x7, 0x9, 0x0, 0x32, 0x6, 0x4, 0x4, 0xd1, 0x1, 0xa7, 0x1000, 0x6, 0x5, 0x2, 0x2, 0x10001, 0x6, 0x1, 0x6, 0x300000, 0x5, 0x4e59, 0xd89, 0x800, 0x4, 0x9, 0xd8, 0xc, 0x0, 0x7f, 0x9, 0x1, 0x3, 0x1, 0xcfcf, 0xc, 0xa8fb, 0x4, 0x8, 0x6, 0x7fffffff, 0x6, 0x8, 0x7, 0x6, 0xb25, 0x10000, 0x7, 0x8, 0x81, 0x7, 0x1, 0x7ff, 0x6, 0x80, 0x367, 0xbfa, 0x0, 0x2, 0x7, 0xef15, 0x34a, 0x7, 0x37bb, 0x1, 0x100, 0x0, 0x0, 0xd, 0x5, 0x3, 0x8, 0x0, 0x4c, 0x0, 0x1, 0xfffffffd, 0x2, 0x0, 0x7, 0x6, 0x20b, 0x8, 0x632, 0x80000000, 0x3ff, 0x4, 0x2, 0x0, 0xa7, 0x5, 0x7f, 0x4, 0x7fff, 0x7b7, 0x81, 0xc, 0x6, 0x1a6, 0x80000000, 0x3, 0x0, 0xffffffff, 0x7, 0x6, 0x8, 0xfffffffa, 0x600, 0x4, 0x23, 0xfffffff7, 0x3, 0x4, 0x1ff, 0xf47, 0x40, 0xfffffff8, 0x57a, 0x6, 0x8, 0x8, 0xfffffffa, 0x76315a73, 0x8, 0x0, 0x7, 0xd, 0x3, 0x1, 0x0, 0x1, 0x0, 0x80, 0x7, 0x8, 0xe82, 0x0, 0x5, 0x1, 0x5d8, 0xa1a, 0xca76, 0x0, 0xd653, 0xba59, 0x10001, 0x4, 0x9, 0xe63, 0xe1c5, 0x43f4de46, 0x10000, 0x7, 0x2, 0x5, 0x3, 0x6, 0x55, 0xfac, 0x1, 0x5, 0x8, 0xddc, 0x3, 0x6, 0x1, 0x1, 0x0, 0x49a4, 0x6, 0x8, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x10001, 0xd3b, 0x0, 0x3, 0x4, 0xfffff77a, 0x4, 0x9858, 0xd, 0x200, 0x8, 0x23, 0x800, 0x1, 0x10, 0x7, 0x5, 0xfffff4d5, 0x6, 0x50a, 0x8001, 0xb, 0x369, 0x6, 0x9, 0x800, 0xe, 0x1, 0x9, 0x200, 0x3, 0xfffffffe, 0x2, 0xb, 0x5, 0xfffffffc, 0x3, 0x7, 0xffffff27, 0x3, 0x80000000, 0x4, 0x5, 0x7, 0x3, 0x0, 0x100000, 0x81, 0x4, 0x26, 0x4, 0x3, 0x2, 0x7, 0x6, 0x40, 0xe, 0x6, 0x5, 0x4, 0x68, 0x7, 0x8001, 0x0, 0x0, 0x8, 0x5, 0x80000000, 0x401, 0x81, 0x3, 0xb, 0x80, 0x4, 0x4, 0x0, 0x7, 0x3, 0xfffffc00, 0x4, 0x800, 0x401, 0xffffffdf, 0xfff000, 0x1ff, 0x81, 0x3, 0x8, 0x8, 0x2, 0x7ff, 0x3, 0x81, 0x8, 0x6, 0x1, 0xfffffffa, 0xc, 0x5, 0x8, 0x5, 0x10000, 0x5, 0xfffffff9, 0x0, 0x3, 0xfffffffd, 0x2, 0x8001, 0x4, 0x9, 0x5, 0x7, 0x8, 0x6, 0x0, 0x9, 0x1, 0xfffffff8, 0x100, 0x4d5, 0x3, 0x9, 0x9, 0x80000001, 0x401, 0x1000, 0x8, 0x0, 0x1, 0xe, 0x2, 0x9a9, 0x0, 0x1, 0x5, 0x2, 0xffff, 0xa, 0xfffffff8, 0xeed, 0x236, 0x10001, 0x5, 0x3ff, 0xe07, 0x9, 0x7, 0x99, 0xfffffff7, 0x493f, 0x7ff, 0x6, 0x2, 0x3, 0x2, 0x7, 0x4b6a1844, 0x13, 0x10, 0x2, 0x10, 0xfffffff9, 0x7, 0x2, 0x9, 0x9, 0x6, 0x7fffffff, 0x2, 0x5, 0x7, 0x0, 0x10000, 0x2, 0x3ff, 0x100, 0x5, 0xadf, 0x6, 0xd8ca, 0x3, 0xfffffff7, 0x0, 0x3, 0x0, 0x5, 0x9, 0xb, 0x3, 0x388f, 0x4, 0xb8, 0xffffffff, 0x341, 0x1000, 0x2, 0x51, 0x3, 0x0, 0xc, 0x400, 0x5, 0x0, 0x2, 0x7, 0x7, 0x8, 0x3, 0x0, 0x8, 0x2, 0x80000000, 0x1000, 0xad, 0x5, 0xfffffff3, 0x80, 0x3, 0x0, 0x9, 0x979, 0x9, 0x2, 0x200, 0x0, 0x6, 0x7f, 0x200, 0x100, 0x2, 0x68e, 0x0, 0x4, 0x9, 0x8, 0x1, 0x3ff, 0x9, 0xe, 0xd376, 0x2, 0x7, 0x8, 0xc, 0xfff, 0xdb44, 0xea9d, 0x10001, 0x6, 0x1c, 0x9, 0x3, 0x7, 0x23c3, 0x7, 0x6, 0x5, 0x3, 0x6, 0x0, 0x4, 0x5, 0x10001, 0x6b, 0xbdf6, 0x4, 0x7f, 0xdb7, 0x80000000, 0x2, 0x0, 0x3, 0x5, 0x5, 0x2, 0x2, 0x1b8f, 0x4, 0xeb9, 0x0, 0x25, 0x7, 0x4, 0x8, 0x0, 0x82, 0x1, 0x1000, 0x80, 0xb1aa, 0xd9, 0xfffffffc, 0xffffffff, 0x6, 0x4, 0x4, 0xf0, 0xb9, 0x2, 0x73, 0x1, 0x7, 0x1, 0x3c7, 0x1, 0x6, 0x6, 0xfffffffe, 0x4, 0x100, 0x395, 0x446, 0x5, 0x6, 0xff, 0x4, 0x2, 0x7, 0x80000000, 0x0, 0x18b, 0xffff, 0x0, 0x3, 0x0, 0x5, 0x81, 0x23, 0x0, 0x8, 0x2, 0x4, 0x6, 0x4, 0x7, 0x97f, 0x6, 0x4, 0x2, 0x7, 0x7ff, 0x4, 0x6, 0xc, 0x7f2f, 0x10, 0x3, 0x8, 0x6, 0x9, 0x8, 0x0, 0x2, 0x101, 0xffff7a46, 0x7, 0xfffffffa, 0x101, 0x0, 0x0, 0x1fc0, 0x8]})
executing program 4:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000000000, 0x0, 0x9, 0xaaa, 0x2}, &(0x7f0000000000)={0x18, 0xfffffffffffffffa, 0x0, 0x0, 0x80000000009c8a}, 0x0, 0x0, 0x0)
executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
socket$inet(0x2, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0)
read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
sendmsg$nl_route(r1, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x16c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd, 0x8001, 0x6591, 0x1, 0xff, 0xf9, 0x8}}, {0x14, 0x2, [0x4, 0x3, 0xf22f, 0x4, 0x7c8, 0x7, 0x4, 0x0]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0x6c2, 0x2, 0xcc9, 0x800, 0x4}}, {0xc, 0x2, [0x3, 0x7fff, 0x8, 0x3]}}, {{0x1c, 0x1, {0x6, 0x0, 0x81, 0x2, 0x2, 0x8fcd, 0x8, 0xa}}, {0x18, 0x2, [0xd, 0x48f, 0xf6, 0x5, 0x75a1, 0x7fff, 0x0, 0x0, 0x6, 0x5]}}, {{0x1c, 0x1, {0x32, 0x76, 0x7, 0x4, 0x2, 0xa, 0x1ff, 0x2}}, {0x8, 0x2, [0x8001, 0x7ff]}}, {{0x1c, 0x1, {0x0, 0x7, 0x0, 0x3ff, 0x1, 0x1, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xf, 0x6, 0xfff, 0x1, 0x0, 0xff, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x5b, 0x0, 0x0, 0x2, 0x6, 0x2, 0x8}}, {0x14, 0x2, [0x8, 0xa, 0x4, 0xffff, 0x80, 0x81, 0x4, 0x7]}}, {{0x1c, 0x1, {0x4, 0x8, 0x6, 0x7ff, 0x0, 0x1, 0x6}}, {0x4}}]}]}, 0x16c}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x24000050)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000004108000240000000092800018008000100667764001c000280080002400000000a080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
executing program 2:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="c2e512c488edbffe2d10000081007aa2892f", 0x12}], 0x1}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
r5 = syz_open_dev$usbfs(0x0, 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x10000, 0x4, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x44dad9eb3ee52315)
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0)
socket(0x10, 0x803, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r2, &(0x7f00000000c0), 0x0, 0x111, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0)
lseek(r3, 0xb, 0x1)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfd9, &(0x7f0000001840)=""/4057, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2002})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x8, 0x60c01)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20442, 0x0)
ioctl$TCGETA(r1, 0x5434, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x31, 0x23, {0x23, 0x30, "428a6ee08af214054fa87f3c312472c797a9a031a439fa38ffefe961267173fab9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x0, 0x3, 0xd6, "1cdca38a45a69b425b6a611a88ffc80eee2262df2af6da6ffc5531e76b76954fe5abbc2ea6f962d0a9d0fccb1338063d6ea95bef92f5b2a53c61a12b41f0aa93f761867cc9e47a960474c3eb5b245ed6316456cbef6976892cb8b219bdd121e605c93926ead9fbaba6985334813e793ba4a617f02e859527074ddfea9226b97e7328b4b59bc4de701007fb1cbeb56fcacfb947754d218eb47e627cfa7eef4744cad356ab0a4cb113c62bc5df012c4652d1dd9a76883148c07bac2879c3ae7001aea45d7be0ed6cc5f55df2e10ed3f031ac36e8ec0e2a"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x39}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "202c15"}, 0xffffffffffffffff, &(0x7f0000000400)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000440)={0x20, 0x84, 0x4, "af1272c6"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "c16b10"}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b99}, 0x4c, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffe, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0x80000001, 0xfe, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0x86, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000072, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x1e20, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x6, 0x1003, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x80203, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x8000, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x2, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x401, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x100055, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x10009d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xbd, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x8bdc, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0xfffffffd, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x800009, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x2000001, 0x9]}, 0x45c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0xf000, 0x54000, 0x5000, 0x100000], 0x0, 0x10, 0xfffffffffffffeff})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
executing program 2:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757064617465020aa4a42064656661756c7420747275737465643aa9"], 0x20, 0xfffffffffffffffd)
syz_emit_ethernet(0xa6, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r1 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x3, 0x6, 0x1, 0x0, 0x2})
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="e76f3bc40cbc6493cb8a88252c16bdb106fb1a4fdbbd8fcd611ded2564c8fa6074517f34fad72e2a24b7138958d9d12382a4e1954ada33402fb015d82ea7815997e1a2d7bf7bdef5", 0x48}], 0x1}}], 0x1, 0x4008000)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x40045b17, 0x0)
futex(0xfffffffffffffffc, 0x6, 0x2, 0x0, 0x0, 0x2)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x3, 0xfffd}, 0x8)
r5 = dup3(r4, r2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x8084)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x7, 0x4, 0x0, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}})
gettid()
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
dup2(r1, r0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x1a4, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x5e, 0xc, "d507a5d5da3adf72153302f384485f5365ade11e7b61240871f68b9f348925c73fa82d52cb5320e140e8566a1b742835940cfd14d74e5bff423076f32d40bdaa6283e4160395757d9a86f4b05e44fa17fe39e15927451ccfd5de"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8c}]}, @NFTA_CHAIN_USERDATA={0xdc, 0xc, "d70180becc8ea1444c8e98d7f8966af8ea6cab8577a84a198643299693368d0f2b32b41f9e6b35d4ccf10bea3ebc915b9ac9007e22291610f6998016f15d910b7c79e4fc3c6b8f1e2045c0ad964a51c71ea1f8b19d13eb1b285f8cca1792f39d070e283a675aaa4e7a2a52e6ddc9fa327006028bb706d82fdd8723843bd2e4db8111fae882771346a90c388f827747d7dd8b435c26e2693a8cb4fadfe2cb1c44b3a836bd9699b71fefa39b91eda6915bfb9febf2265f0558a181d7ea23f08f09de8fd5370af7a1910739f03fd37e97717a8dd62583f7631b"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x268, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "0753f2b87de1dc890f4ad3e454a5fc4a2ed971c7aae89451002dd48a0a8ace60891d57679bc4a64b57e5eac8661418e86a5e9a18ac8dbdff1c5ee276809724926ee1f5dfff4667e173cfb2e9b29a64ffd63578e9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd5, 0x6, "f9f47ceff923983d51bea80d87932d9ffb468d7b3397aae7f319194bd5ebd36a2b591de27b7bb6f94a0d3a8aa28f6344bd4b250808d77edf1c35b1d8bbd4fb912beff68ee3cede14e431f3eb07a4b2cfe705f9fbf7cefe1491a822fa0b59876fb5cd2f2e353224bd379fe471db47cf0440710a7765c7868428b1ae22ae8b59d8ae293499e22dc875fc80a9f8bd04996bd6ea94eefa6c55e052bc2cd44c30130e04c0ddec06f3c5bcd6240b1ced0b3798a643be82d79e269d36a59425ab7247f4fccbec5ce2d347201c17c0c7271198f69b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xf8, 0x6, "5202a91e7af1590925a9539f71f547f9c08f25a75bfd17e22331f935afa06f3b5263373573908e340fe9c734cf3e6539698233199122a592d4d51981d2170aa955b47aa8a23551bf7482b4a7381e8bd1fb1c1d3a69414389245c33fdf6b8efb5383c44ca46dc40ecd455cc7ddbb1d030ad8b2ad027cd2c93910873bc2e9b4c97da484422e335c5c7ce2ae7bc7a27bb7f25c1c01f13493f019d1e9e9f662a8d699b1f11f2882a741c5d4a609d960fb441dd9a40a66bd05a328b62b8a891b17c78c1ee3ee12ccb30fba337dd05ea92eb7bea718ddc147d653a7ac2efdfb5ee5c3612d99bf9804a9493e22f3a359487c5982edec9e4"}]}, @NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "62ea45da9b9ebcda5481cdc4c2cbb883f963842b79c620c3c153cbf72af8b5351f1ab9060900826b9d572c3a522091d535e0b48d9b417946e98a98155006db642876ea073d6b601bf36fe22ae8ce5e2cf2a116c59f4538f23dbec3cc3ac16c106d931e3b83bf57c3db2a2517b548602b3bef67d648e62282adb3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x20}}, 0x544}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x39, {"f36e400f0d3e48b8fcff0000000000000f23c80f21f8350800d0000f23f8420f69d8470f011f2e66460fc7b497464c69020f01f866b813010f00d0430f01c466baa10066ed"}}], 0x56})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00')
getdents(r4, &(0x7f0000000000)=""/52, 0x34)
getdents64(r4, 0x0, 0x3a)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x801)
r7 = syz_io_uring_setup(0x82d, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
io_uring_enter(r7, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000b9a51ace000000000000000000000000040000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000130000000000000000000000000000000000fcffffff00000000"]}, 0x108)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, r0, 0xfffff000)
executing program 4:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x20, 0x68, 0x400, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x3d}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018224500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000208000000003300020900"], 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500282cfffe8000000000000000000000000000bbfe8000"/50], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)={0x44, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x32, 0x124, 0x0, 0x0, @str='09\xfb\'\x14Z\x86\x98\xa0\xca$s\xef!\x92\xf3\xd4W\x9d\xc1\xe3\x89\xa7[_e$>&X\xe4\xe9Ym\xa4\x93\"\xf2\xbdM\xad]*\xbd4.'}]}, 0x44}], 0x1}, 0x4000880)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
r5 = getpid()
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r6, &(0x7f0000000e00)='1m', 0x2, 0x200048d0, &(0x7f0000000e40)={0x2, 0x4e23, @empty}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r7, &(0x7f0000000180)={r8, r3, 0x10000})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x5, 0xffffffffffffffff, 0x80000})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = io_uring_setup(0x4317, &(0x7f0000000140)={0x0, 0xfffffffe, 0x40, 0x1, 0x11})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$tipc(0x1e, 0x5, 0x0)
close(0x3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00')
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40))
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x36, &(0x7f00000000c0), 0x1)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x936, 0x4a200)
close_range(r1, 0xffffffffffffffff, 0x0)
executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmmsg$inet6(r1, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}], 0x2, 0x20044040)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000080)={0x800, 0x30314742, 0x500, 0x3c0, 0x1, @discrete={0x1, 0x4}})
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f00000007c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7bf, 0x3a, '\xb2\x82\xdfC\x85\x89\x11N6zQ\xb0>Z\xd0\xa0\x9f\x01\xc5\x89[\xb3\xf6\x9aF\xf9/\x10\x8c\xbf\x91\xde\xc7\x13\xdbJp\xde\x16\x9f\xe3\xe7by\xd4\x99y\xeb\x1c\x19\xec\xb8\xfc\x89j\xb1\x1ca\xd8P\xe6\x11\xe1\x9c\xa8\xc3\x06;\xf5\x81%\xe4F\x86\xdb\x96z\xce\xc1A\xdb\xe5\xaa\x0e9\xfaK\xd1\x81\x99\a\x83\r\xaf\xda\x19\xc50M\xd2\x8d%\x96\x02^L\xedUH\x8c\xb9\xd14P\t(}8T\x95', 0x3a, '\\x\nw\xf5\x03\x83b]2K5=\"\xf7\x82\xe4\xb2\xb9\x0f8\xff\x978\xd1o\xd6\x98%\xaa\xb3\x01\x95\xff\xff\xff\xfb\x00\xe0\xff\xff\xff\x00\x00R\xf8\x93Q\xf99\x00\x01\x16\xf9\xb7\x14L|\x1f\xd1J\xf4\xf0\xcf\xc5p\xb2\xf6Y[\x8c\xe8\xf7\x8b2r\x81O\x1f\rJ\x8c\x15F\xc9\xdd \x88|\xee\x8e\x05\xe2\xee\xa5\xa5\xe2tP_$\xdb\xc3\xd4\x1c\x99U\x02\xc9\x1b$2\x88\x86G\x18|\xb7m=fR\a\xad\x88\xa6\x85\xb2\x90\xfb\xc5\xf0I0k^C\xee\xf5\x10\xc3\xd9\xfb*#u\r\xe0*\xfe\xd1>%h[Q\xec\xe5O\xe0p}\a\xebe\xc0\xe53\xdfP\xac=\x1d\x89\xc4TA\x1c\xbd\xed\x8a(\x01F\x06F2r\x99\xf3\x7f\xf4h\x04\xe4\xc5Ww\xc0\xe2\xfe\xb7\"\x02\xf0<b\".w\xe1\\\a\xfb\f\xb4L\xe1\xe6\x905;\xf6h\x97Z2\xd4\xd0\xf2\xb3\v\xaev\xc6\xd4o\x02E~/<<\x86\xd0\xaf\v\xdf\x19\xd9\xa8\xc9\x0f\xe5\x91X', 0x3a, './file1'}, 0x19f)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_usbip_server_init(0x1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
getsockname$unix(r1, &(0x7f00000008c0)=@abs, &(0x7f0000000200)=0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0xa, 0x5}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x15)
recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
eventfd2(0x5, 0x1)
openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95a, 0x5, 0x8, 0x800081, 0x2, 0x1, 0x3, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x3, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0xffffffff, 0x71, 0xd, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x0, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x1, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x400, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0x8, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x1, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0x6, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa2, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x0, 0x1, 0x5, 0x2, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x4, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0x3, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x918)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='encrypted\x00', &(0x7f0000000240))
poll(0x0, 0x0, 0x9)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @sliced={0xfff, [0x9, 0xfa, 0x80, 0x401, 0x0, 0xff80, 0x1c00, 0x2590, 0xffff, 0x9, 0x0, 0x7f4, 0x7, 0x2, 0x6, 0x9, 0xfff, 0xfff9, 0xfffe, 0x10, 0xf837, 0xe020, 0x800, 0x8, 0x0, 0x200, 0x53, 0xff, 0x8, 0x9, 0xa, 0x101, 0x6, 0x1, 0x7, 0xe03c, 0xfff, 0x0, 0xf801, 0xdf8, 0x6, 0x1, 0x5, 0x4, 0xdc2, 0x2, 0x400, 0xa15d], 0x2}})
executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffffffffffff, 0x42200)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x500000000000000)
executing program 1:
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340240000000900010073797a30000000000900020073797a32"], 0x84}}, 0x40)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x6, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18)
openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x9, 0x3007, 0x0, 0xd, 0x0, 0x3, 0x6}})
syz_genetlink_get_family_id$batadv(0x0, r3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setitimer(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000a0b80000000002000002400004803c0001800dffee00696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000001400000011000100"/146], 0x94}}, 0x0)
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
syz_open_dev$video(0x0, 0x0, 0x10b200)
r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})
executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000407000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000140)="7d0066baf80cb8bb91a285ef66bafc0cb086ee0fc77d00660f38dd9100200000c4c3055fd302c4c2f59ac9b805000000b994add14b0f01d9260f0f5e048e64660f3839c966baf80cb8b1b98d86ef66bafc0cb000ee"}], 0x1, 0x0, 0x0, 0x13)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250600000008082b00030000000800230006000000050037000100000008002c00faffffff08002b00190000004a8a6836010de87ad2ffed791583256e7cd92bc5f2bd7feeddf900af784f358ddd22a9752dc97529f7dbccd701ce7027cb6559783bb03d64ca041c4ca4178bf206b4314645c02ad6c8c87972fdc9375ce2a090e87880d636e6cd5e005a7d37874d18d30642c411d6bd82cab7a329cf2fdaff8b53"], 0x3c}, 0x1, 0x0, 0x0, 0x20040020}, 0x20040010)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r8 = socket(0x200000000000011, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=r9], 0x3c}}, 0x4040800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x4}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
executing program 1:
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x8c5)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="080004007f"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000e0a050000000000000000000a0000050900010073797a31000000001c0003800c00008008000340000000020c00008008000340000000020900020073797a3100000000140000001100010000000000000000000500000a9d0d287701c9e400a109048d38c73017fa5ee451a5a13e2e2f8f9da98fa642d3c6a100ab7c4715b879d28991d8fedfcdc0ac62056d64cb7430fac0b7d91a7a03064b5de646d6b31e8d8565e568932d91818bd5cf9bde697baaadb76b7d6d50e861c081"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000006b2ba0c5f202fa0000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, &(0x7f0000000180))
executing program 2:
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x2b, 0x801, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000118, 0x0, 0x9}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x37a}, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffffff01, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x4d, 0x6000, @fd_index=0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001b80)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000740)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000640)=""/227, 0xe3}], 0x6}}, {{&(0x7f00000007c0)=@xdp, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/139, 0x8b}, {&(0x7f0000001a00)=""/214, 0xd6}], 0x5, &(0x7f0000000300)=""/35, 0x23}, 0x5cfb36eb}], 0x2, 0x10140, &(0x7f0000001c00)={0x0, 0x3938700})
executing program 1:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="c2e512c488edbffe2d10000081007aa2892f", 0x12}], 0x1}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
r5 = syz_open_dev$usbfs(0x0, 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x10000, 0x4, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x44dad9eb3ee52315)
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-write$proc_mixer-syz_open_dev$video-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
syz_open_dev$video(0x0, 0x0, 0x10b200)
r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-write$proc_mixer-syz_open_dev$video-syz_open_dev$dvb_demux
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
syz_open_dev$video(0x0, 0x0, 0x10b200)
syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-write$proc_mixer-syz_open_dev$video-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
syz_open_dev$video(0x0, 0x0, 0x10b200)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-write$proc_mixer-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x33)
r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$proc_mixer-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(0x0, 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
program crashed: WARNING in as102_dvb_dmx_start_feed
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_FILTER
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

program crashed: WARNING in as102_dvb_dmx_start_feed
validation run: crashed=true
reproducing took 42m48.615657457s
repro crashed as (corrupted=false):
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: kernel/locking/mutex.c:593 at __mutex_lock_common kernel/locking/mutex.c:593 [inline], CPU#0: syz.2.86/6148
WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300 kernel/locking/mutex.c:776, CPU#0: syz.2.86/6148
Modules linked in:
CPU: 0 UID: 0 PID: 6148 Comm: syz.2.86 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:593 [inline]
RIP: 0010:__mutex_lock+0x10ab/0x1300 kernel/locking/mutex.c:776
Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f
RSP: 0018:ffffc90003fffa20 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff920007fff5c RCX: ffff88802e6fbd00
RDX: 0000000000000000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10
RBP: ffffc90003fffbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8
R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff88802a46eb60
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  000055557e7c3500(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2fd63fff CR3: 000000007590e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 as102_dvb_dmx_start_feed+0x70/0x290 drivers/media/usb/as102/as102_drv.c:139
 dmx_section_feed_start_filtering+0x518/0x6c0 drivers/media/dvb-core/dvb_demux.c:977
 dvb_dmxdev_filter_start+0xcf4/0x10e0 drivers/media/dvb-core/dmxdev.c:760
 dvb_demux_do_ioctl+0x470/0x540 drivers/media/dvb-core/dmxdev.c:1083
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa99959c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcb672bbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa999815fa0 RCX: 00007fa99959c799
RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
RBP: 00007fa999632c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa999815fac R14: 00007fa999815fa0 R15: 00007fa999815fa0
 </TASK>
----------------
Code disassembly (best guess):
   0:	11 90 48 c1 e8 03    	adc    %edx,0x3e8c148(%rax)
   6:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax
   b:	84 c0                	test   %al,%al
   d:	0f 85 33 02 00 00    	jne    0x246
  13:	83 3d d9 a1 61 04 00 	cmpl   $0x0,0x461a1d9(%rip)        # 0x461a1f3
  1a:	75 13                	jne    0x2f
  1c:	48 8d 3d 1c b7 64 04 	lea    0x464b71c(%rip),%rdi        # 0x464b73f
  23:	48 c7 c6 c0 e0 cc 8b 	mov    $0xffffffff8bcce0c0,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	90                   	nop
  30:	e9 ac f0 ff ff       	jmp    0xfffff0e1
  35:	90                   	nop
  36:	0f 0b                	ud2
  38:	90                   	nop
  39:	e9 73 f4 ff ff       	jmp    0xfffff4b1
  3e:	90                   	nop
  3f:	0f                   	.byte 0xf

final repro crashed as (corrupted=false):
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: kernel/locking/mutex.c:593 at __mutex_lock_common kernel/locking/mutex.c:593 [inline], CPU#0: syz.2.86/6148
WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300 kernel/locking/mutex.c:776, CPU#0: syz.2.86/6148
Modules linked in:
CPU: 0 UID: 0 PID: 6148 Comm: syz.2.86 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:593 [inline]
RIP: 0010:__mutex_lock+0x10ab/0x1300 kernel/locking/mutex.c:776
Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f
RSP: 0018:ffffc90003fffa20 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff920007fff5c RCX: ffff88802e6fbd00
RDX: 0000000000000000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10
RBP: ffffc90003fffbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8
R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff88802a46eb60
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  000055557e7c3500(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2fd63fff CR3: 000000007590e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 as102_dvb_dmx_start_feed+0x70/0x290 drivers/media/usb/as102/as102_drv.c:139
 dmx_section_feed_start_filtering+0x518/0x6c0 drivers/media/dvb-core/dvb_demux.c:977
 dvb_dmxdev_filter_start+0xcf4/0x10e0 drivers/media/dvb-core/dmxdev.c:760
 dvb_demux_do_ioctl+0x470/0x540 drivers/media/dvb-core/dmxdev.c:1083
 dvb_usercopy+0x199/0x2e0 drivers/media/dvb-core/dvbdev.c:996
 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa99959c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcb672bbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa999815fa0 RCX: 00007fa99959c799
RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
RBP: 00007fa999632c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa999815fac R14: 00007fa999815fa0 R15: 00007fa999815fa0
 </TASK>
----------------
Code disassembly (best guess):
   0:	11 90 48 c1 e8 03    	adc    %edx,0x3e8c148(%rax)
   6:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax
   b:	84 c0                	test   %al,%al
   d:	0f 85 33 02 00 00    	jne    0x246
  13:	83 3d d9 a1 61 04 00 	cmpl   $0x0,0x461a1d9(%rip)        # 0x461a1f3
  1a:	75 13                	jne    0x2f
  1c:	48 8d 3d 1c b7 64 04 	lea    0x464b71c(%rip),%rdi        # 0x464b73f
  23:	48 c7 c6 c0 e0 cc 8b 	mov    $0xffffffff8bcce0c0,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	90                   	nop
  30:	e9 ac f0 ff ff       	jmp    0xfffff0e1
  35:	90                   	nop
  36:	0f 0b                	ud2
  38:	90                   	nop
  39:	e9 73 f4 ff ff       	jmp    0xfffff4b1
  3e:	90                   	nop
  3f:	0f                   	.byte 0xf