Extracting prog: 1h3m24.562028703s Minimizing prog: 3h9m51.95292848s Simplifying prog options: 0s Extracting C: 4m8.013496305s Simplifying C: 25m25.231625388s extracting reproducer from 51 programs testing a last program of every proc single: executing 11 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$ieee802154-sendmsg$IEEE802154_LLSEC_LIST_DEVKEY-syz_genetlink_get_family_id$ieee802154-sendmsg$IEEE802154_LLSEC_GETPARAMS-socket$kcm-syz_init_net_socket$ax25-ioctl$SIOCAX25NOUID-ioctl$OCFS2_IOC_REFLINK-socket$nl_route-sendmsg$nl_route_sched-bpf$PROG_LOAD_XDP-sendmsg$NFC_CMD_FW_DOWNLOAD detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44094}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r3 = socket$kcm(0x29, 0x8, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000840)=0x1) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000000240)={&(0x7f0000000140)='GPL\x00', &(0x7f0000000180)='GPL\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0xcc, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_tunnel_key={0xb4, 0x1, 0x0, 0x0, {{0x5}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x53, 0x6, "b95a87269e74a71b97db465193f0b5000779e7f833ca11367abd61f077c3f7543dbfcbe07081b2dd8ea7ff2a8f37e904b07c37009ee6509db695dde342162c1eea7d63321a2c5f00f253e7962e852e"}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000011000000000000022000100bc990000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x200009, 0x0, 0x0, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-bpf$MAP_CREATE-close-socket-syz_open_procfs$namespace-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_DEBUG_SET-getsockopt$inet_pktinfo-ioctl$sock_SIOCGIFINDEX-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET-socket$alg-bind$alg-accept4-sendmmsg$alg-socket-syz_genetlink_get_family_id$ethtool-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-sendmsg$ETHTOOL_MSG_PAUSE_GET-sendmsg$nl_route_sched-sendmsg$IPCTNL_MSG_EXP_NEW-write detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) (async) close(0x3) r2 = socket(0x10, 0x803, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @initdev}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth1_vlan\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c}}]}, 0x181}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000000600)={0x110c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1098, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "b181b92035dd2cf377244c3081b90343227039bf632629ff05bb6fb924c0fa41046bf87cb23e8f0f5e38b77d918347cc0161ffc312348c54e491a71e41a02adbac86649db44de76b9466355c8d1eaccd7364dd9ab9fbbf6f7e99e9d2b106df3f3c1e93461610a204ad94dcd3d89ac6bcdf6b17824d9dfa439e67d9f88ef7295d541f58"}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x110c}, 0x1, 0x0, 0x0, 0x44089}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, 0x0, 0x0, 0x40800) (async) r11 = socket(0x10, 0x3, 0x4) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x40, 0xf, 0x401, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x4, 0xef, 0x3, 0x5}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x5, [{@empty, 0x401}]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x2, [0x7611253, 0x9, 0x6]}, @rr={0x7, 0x13, 0xe2, [@multicast1, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x8, [{@remote}, {@empty, 0xa}, {@multicast2, 0x2}]}, @cipso={0x86, 0x2a, 0x2, [{0x2, 0xa, "c7b870aec01916ae"}, {0x2, 0x11, "50421ab8c5a871e18af45da1be5581"}, {0x0, 0x9, "75132821f318da"}]}, @generic={0x88, 0x12, "0511fec5134be6b80d4b36dcf45e5b83"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x10000}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r12, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008091}, 0x4080) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_generic-syz_emit_ethernet-clock_gettime-sendmsg$can_bcm-bpf$PROG_LOAD_XDP-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$ITER_CREATE-bpf$MAP_CREATE_RINGBUF-socket-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_TAIL_CALL-bpf$MAP_UPDATE_CONST_STR-ioctl$XFS_IOC_PATH_TO_HANDLE-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN detailed listing: executing program 0: r0 = socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x17, &(0x7f0000000000)={@remote, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, 'k:', 'XyT', 0x805}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, 0xffff0001, {r1, r2/1000+60000}, {}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x15, 0x5, 0x0, 0x0, "95146b47b58eea2187aa0a5a2e04eeb7c29a0907136b867bc35d179ca3bf6b6d2008e4e434495007520e4c857568ebcee466f04147a229a403f095fd4ee3a113"}}, 0x80}}, 0xc080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000018c0)={{r4, &(0x7f00000007c0)=',)\xb4\x00', 0x300, &(0x7f0000000800)={@align=0x5, {0x524, 0x8, 0xfffffffa, 0xffff}}, 0x9, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x20000000}, {[0xa, 0x0, 0x1, 0x8000]}, 0xc1a7, 0x1000, &(0x7f00000008c0)=""/4096}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)='%-5lx \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001c00)={r4, &(0x7f0000001b00)=']#]\x99#^#!\x00', 0x100, &(0x7f0000001b40)={@_ha_fsid={[0x7, 0xffff8000]}, {0x9, 0x3ff, 0x9, 0x771a}}, 0x100, &(0x7f0000001b80), &(0x7f0000001bc0)=0x401}) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c40)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r16}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r17, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x18, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000440)='syzkaller\x00', 0x401, 0xf2, &(0x7f00000006c0)=""/242, 0x41100, 0x21, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x6, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[r11, r12, r13, r14, r15], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_icmp_raw-syz_init_net_socket$bt_hci-syz_open_procfs$namespace-unshare-socket-socket$nl_route-socket$netlink-socket-sendmsg$IPVS_CMD_SET_INFO-getsockname$packet-sendmsg$nl_route-socket$nl_route-socket-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route-setsockopt$IP6T_SO_SET_REPLACE-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bind$inet-setsockopt$SO_TIMESTAMPING-connect$inet-bpf$BPF_BTF_GET_FD_BY_ID-socket$nl_generic-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_BLA_BACKBONE-bpf$PROG_LOAD_XDP-socket$nl_route-getsockname$packet detailed listing: executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYRES8=r5, @ANYRES16=r6, @ANYBLOB="0200000000000000612abc7fbabcc1476d889cb98db44b9920945dfc891836da25420b163a1fa7e99d79419fcbd74b6187769b76af00e24b71a200aeddb2db9c63cb0abbd621639265a196ae4f5a2ec1e2c05bf4860c7ae1a704e745e29d8d8e5a12240f09fe4e4c1b24a88b7455504ecea2915729ee92e6164837cfda807ea132766f75841f1fe999b192bbbff9cf375f5f2c8059fd1a1e76f20983573f959ee0544945b7b5d291549e707a7e82b3d08334790927a94433e627639c392a2a1c36ea3fc673b63da37dd75ea146248c3c00"/219], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000107701800000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYRES16], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FS_IOC_RESVSP-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$alg-setsockopt$ALG_SET_KEY-accept$alg-sendmmsg$alg-recvmsg-syz_genetlink_get_family_id$mptcp-bpf$MAP_CREATE_CONST_STR-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-socket$inet_mptcp-connect$inet-socket$can_bcm-connect$can_bcm-sendmsg$can_bcm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$MPTCP_PM_CMD_DEL_ADDR detailed listing: executing program 0: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d", 0x10}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@jmp={0x5, 0x1, 0xb, 0x2, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000540)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000005000000000000003a41a0b18a9b51f7100fd80d736544d2e1abac719e29"], 0x38}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}}, 0x20040810) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_rdma-bind$alg-socketpair$unix-pipe-splice-write$tun-write$cgroup_int-socket$inet-sendmmsg$inet_sctp-mmap-sendmsg$netlink detailed listing: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffff, 0x4) write$tun(r3, 0x0, 0x1001) write$cgroup_int(r3, &(0x7f0000000380)=0x8, 0x12) r4 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_rdma-bind$alg-socketpair$unix-pipe-splice-write$tun-write$cgroup_int-socket$inet-sendmmsg$inet_sctp-mmap-sendmsg$netlink detailed listing: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffff, 0x4) write$tun(r3, 0x0, 0x1001) write$cgroup_int(r3, &(0x7f0000000380)=0x8, 0x12) r4 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-bpf$BPF_BTF_LOAD-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_generic-sendmsg$nl_generic-socket$kcm-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$inet-ioctl$XFS_IOC_PATH_TO_HANDLE-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_MPATH-openat$ppp-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0xfffffffffffffdd6, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x400c5}, 0xc0000) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x71, &(0x7f0000001080)=[{&(0x7f0000001980)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a34af0e2eabf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819eeae05952", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x12, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000040)='/dev/ppp\x00', 0x58c6616b8847cf97, &(0x7f0000000180)={@_ha_fsid={[0xa0000000]}, {0x6, 0x7, 0x6, 0xffffffffffffff00}}, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-bpf$BPF_BTF_LOAD-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_generic-sendmsg$nl_generic-socket$kcm-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$inet-ioctl$XFS_IOC_PATH_TO_HANDLE-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_MPATH-openat$ppp-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0xfffffffffffffdd6, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x400c5}, 0xc0000) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x71, &(0x7f0000001080)=[{&(0x7f0000001980)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a34af0e2eabf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819eeae05952", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x12, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000040)='/dev/ppp\x00', 0x58c6616b8847cf97, &(0x7f0000000180)={@_ha_fsid={[0xa0000000]}, {0x6, 0x7, 0x6, 0xffffffffffffff00}}, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x2000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_freezer_state-socket$nl_xfrm-sendmsg$nl_xfrm-sendfile detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020440000e00000027bd7000fddbdf25050006002b0000000a004e2300001000fe800000000000000000000000000039000000000000000002000100000000000f0007010100000005000500002000000a004e2110000000ff020000000000000000000000000001ff0f000000000000772199a74d0e33535a5954bc369ca3674756be42b581f30b3cd7a3ceb5a05803e582c39019c15da6f13206c352690fb33e2f78ffc9ff7390b335f8e14f059a06420682f130e82b5f730b0698da3a6061b78ea3fd069a19640c2d295aee310a6a4b39b7a70d85cb6e78096c95ca5214c48ce827f87ea4ce34ef0bc7cc7d5a1e3acda61a96e199ecab8df850db854960a040feb921a696"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newsa={0x37c, 0x1a, 0x713, 0x20, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0xa0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x2000000000000000, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0xe}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@mark={0xc, 0x15, {0x35075a, 0x7}}, @replay_thresh={0x8, 0xb, 0x2}, @lastused={0xc}, @replay_thresh={0x8, 0xb, 0x821}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x2b}, {@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x8000, 0x0, 0x8, 0x3ff, 0xfffffffffffffff8, 0x80, 0xffff, 0x2a}, {0x1, 0x4, 0x1, 0x40}, {0x1, 0x6, 0x9}, 0x70bd28, 0x0, 0x2, 0x3, 0x2, 0x83}}, @migrate={0x180, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in=@broadcast, @in6=@empty, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}, {@in=@multicast2, @in=@broadcast, @in6=@mcast1, @in=@broadcast, 0x32, 0xc1396666e93af5c4, 0x0, 0x3506, 0xa, 0x2}, {@in=@empty, @in6=@private0, @in=@local, @in=@loopback, 0x3c, 0x5, 0x0, 0x3507, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@local, 0x33, 0x0, 0x0, 0x3507, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, @in6=@loopback, @in6=@mcast2, 0xff, 0x3, 0x0, 0x3503, 0x2, 0xa}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20044890}, 0x2000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) program crashed: INFO: task hung in nfsd_nl_threads_set_doit single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_freezer_state-socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newsa={0x37c, 0x1a, 0x713, 0x20, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0xa0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x2000000000000000, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0xe}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@mark={0xc, 0x15, {0x35075a, 0x7}}, @replay_thresh={0x8, 0xb, 0x2}, @lastused={0xc}, @replay_thresh={0x8, 0xb, 0x821}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x2b}, {@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x8000, 0x0, 0x8, 0x3ff, 0xfffffffffffffff8, 0x80, 0xffff, 0x2a}, {0x1, 0x4, 0x1, 0x40}, {0x1, 0x6, 0x9}, 0x70bd28, 0x0, 0x2, 0x3, 0x2, 0x83}}, @migrate={0x180, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in=@broadcast, @in6=@empty, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}, {@in=@multicast2, @in=@broadcast, @in6=@mcast1, @in=@broadcast, 0x32, 0xc1396666e93af5c4, 0x0, 0x3506, 0xa, 0x2}, {@in=@empty, @in6=@private0, @in=@local, @in=@loopback, 0x3c, 0x5, 0x0, 0x3507, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@local, 0x33, 0x0, 0x0, 0x3507, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, @in6=@loopback, @in6=@mcast2, 0xff, 0x3, 0x0, 0x3503, 0x2, 0xa}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20044890}, 0x2000) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_freezer_state-socket$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_freezer_state detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root-openat$cgroup_root detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6-mkdirat$cgroup_root detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key-sendmmsg$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xf8}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a416051142b87bd745f7599b7457e4728af4386dec913472d00a71c5cc66b5c689921c0b4744c5c1196cc8a7e762e1abea378cbd1d363e0acd3f47d5f", 0xec}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key-sendmsg$key detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020440000e00000027bd7000fddbdf25050006002b0000000a004e2300001000fe800000000000000000000000000039000000000000000002000100000000000f0007010100000005000500002000000a004e2110000000ff020000000000000000000000000001ff0f000000000000772199a74d0e33535a5954bc369ca3674756be42b581f30b3cd7a3ceb5a05803e582c39019c15da6f13206c352690fb33e2f78ffc9ff7390b335f8e14f059a06420682f130e82b5f730b0698da3a6061b78ea3fd069a19640c2d295aee310a6a4b39b7a70d85cb6e78096c95ca5214c48ce827f87ea4ce34ef0bc7cc7d5a1e3acda61a96e199ecab8df850db854960a040feb921a696"], 0x70}, 0x1, 0x7}, 0x0) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp-socket$key detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH-socket$inet6_sctp detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic-sendmsg$BATADV_CMD_SET_MESH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x0) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-splice detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x39000, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-pipe-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-shutdown-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$inet_tcp-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-socket$netlink-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$can_bcm-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-socket$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-connect$inet-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-getsockopt$rose-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0x100) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-syz_init_net_socket$rose-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0x100) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010300000000000000000500000a0900020073799e3691f60000050005000a000000050005000200000005000400000000001400078008000840000000d805001400040000000500050005000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044040}, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_threads_set_doit testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$nl_route-sendmsg$nl_route-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100000000423f4a78173a8c556c", @ANYRES32=0x0, @ANYBLOB="0a0003000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf25020000000800010003000000ac3b792a9e280eaf67945e4190152fb4ecbbb26715faa517891f52a52f8a5288a85dc3d6e108346f7b1fcfbdb931965aaa4d3e86fa885fe7d2ca2f18d778f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) program crashed: INFO: task hung in nfsd_nl_threads_set_doit validation run: crashed=true reproducing took 4h54m24.291751929s repro crashed as (corrupted=false): INFO: task syz.3.20:6132 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:21496 pid:6132 tgid:6132 ppid:5963 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2ddc99c819 RSP: 002b:00007ffe98ded0e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f2ddcc15fa0 RCX: 00007f2ddc99c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f2ddca32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2ddcc15fac R14: 00007f2ddcc15fa0 R15: 00007f2ddcc15fa0 INFO: task syz.4.21:6133 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:21216 pid:6133 tgid:6133 ppid:5968 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f07afd9c819 RSP: 002b:00007ffc4d6ee6e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f07b0015fa0 RCX: 00007f07afd9c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f07afe32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f07b0015fac R14: 00007f07b0015fa0 R15: 00007f07b0015fa0 INFO: task syz.0.17:6134 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:21624 pid:6134 tgid:6134 ppid:5955 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f13fb39c819 RSP: 002b:00007ffe079dc528 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f13fb615fa0 RCX: 00007f13fb39c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f13fb432c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f13fb615fac R14: 00007f13fb615fa0 R15: 00007f13fb615fa0 INFO: task syz.1.18:6135 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:21544 pid:6135 tgid:6135 ppid:5959 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f82ce79c819 RSP: 002b:00007ffee4876478 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f82cea15fa0 RCX: 00007f82ce79c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f82ce832c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f82cea15fac R14: 00007f82cea15fa0 R15: 00007f82cea15fa0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5578: #0: ffff8880366bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 drivers/tty/n_tty.c:2211 2 locks held by syz.2.19/6130: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.20/6132: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.21/6133: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.17/6134: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.18/6135: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.23/6265: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.22/6266: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.25/6267: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.26/6269: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.24/6270: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.27/6362: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.28/6369: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.30/6383: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.29/6384: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.31/6385: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.32/6460: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.33/6489: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.34/6502: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.36/6518: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.35/6519: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.37/6540: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.38/6604: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.39/6615: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.40/6623: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.41/6627: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.42/6655: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.43/6729: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex ){+.+.}-{4:4} , at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.44/6757: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.45/6766: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.46/6767: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.47/6788: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.48/6810: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.49/6864: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.50/6870: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.51/6876: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.52/6902: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.53/6928: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.54/6984: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.55/7010: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.56/7015: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.57/7026: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.58/7047: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 7 locks held by syz-executor/7053: #0: ffff888035972410 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2723 [inline] #0: ffff888035972410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 fs/read_write.c:684 #1: ffff888043b71080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 fs/kernfs/file.c:343 #2: ffff8880286881e8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880286881e8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 fs/kernfs/file.c:344 #3: ffffffff8f641a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1154 [inline] #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 drivers/base/dd.c:1352 #5: ffff888056278258 (&devlink->lock_key#34){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 drivers/net/netdevsim/netdev.c:1185 2 locks held by dhcpcd/7058: #0: ffff88802d712260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff88802d712260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961 2 locks held by syz-executor/7063: #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 net/core/net_namespace.c:575 #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 net/ipv4/nexthop.c:3993 2 locks held by dhcpcd/7065: #0: ffff88802afe0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff88802afe0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961 1 lock held by dhcpcd/7066: #0: ffff888078e5e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff888078e5e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xfaa/0x1000 kernel/hung_task.c:515 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63 Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 RAX: 0000000000166bf9 RBX: ffffffff819a67ea RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005613e99b1168 CR3: 0000000035662000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x36a/0x5f0 kernel/sched/idle.c:352 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:451 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x147 final repro crashed as (corrupted=false): INFO: task syz.3.20:6132 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:21496 pid:6132 tgid:6132 ppid:5963 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2ddc99c819 RSP: 002b:00007ffe98ded0e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f2ddcc15fa0 RCX: 00007f2ddc99c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f2ddca32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2ddcc15fac R14: 00007f2ddcc15fa0 R15: 00007f2ddcc15fa0 INFO: task syz.4.21:6133 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:21216 pid:6133 tgid:6133 ppid:5968 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f07afd9c819 RSP: 002b:00007ffc4d6ee6e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f07b0015fa0 RCX: 00007f07afd9c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f07afe32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f07b0015fac R14: 00007f07b0015fa0 R15: 00007f07b0015fa0 INFO: task syz.0.17:6134 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:21624 pid:6134 tgid:6134 ppid:5955 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f13fb39c819 RSP: 002b:00007ffe079dc528 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f13fb615fa0 RCX: 00007f13fb39c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f13fb432c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f13fb615fac R14: 00007f13fb615fa0 R15: 00007f13fb615fa0 INFO: task syz.1.18:6135 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:21544 pid:6135 tgid:6135 ppid:5959 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x17b4/0x5680 kernel/sched/core.c:7183 __schedule_loop kernel/sched/core.c:7262 [inline] schedule+0x164/0x360 kernel/sched/core.c:7277 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7334 __mutex_lock_common kernel/locking/mutex.c:712 [inline] __mutex_lock+0x7f5/0x1550 kernel/locking/mutex.c:806 nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x972/0x9f0 net/socket.c:2698 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f82ce79c819 RSP: 002b:00007ffee4876478 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f82cea15fa0 RCX: 00007f82ce79c819 RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f82ce832c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f82cea15fac R14: 00007f82cea15fa0 R15: 00007f82cea15fa0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5578: #0: ffff8880366bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 drivers/tty/n_tty.c:2211 2 locks held by syz.2.19/6130: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.20/6132: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.21/6133: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.17/6134: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.18/6135: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.23/6265: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.22/6266: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.25/6267: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.26/6269: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.24/6270: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.27/6362: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.28/6369: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.30/6383: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.29/6384: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.31/6385: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.32/6460: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.33/6489: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.34/6502: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.36/6518: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.35/6519: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.37/6540: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.38/6604: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.39/6615: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.40/6623: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.41/6627: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.42/6655: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.43/6729: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex ){+.+.}-{4:4} , at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.44/6757: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.45/6766: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.46/6767: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.47/6788: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.48/6810: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.1.49/6864: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.0.50/6870: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.4.51/6876: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.5.52/6902: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.6.53/6928: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.7.54/6984: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.9.55/7010: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.8.56/7015: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.2.57/7026: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 2 locks held by syz.3.58/7047: #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 fs/nfsd/nfsctl.c:1607 7 locks held by syz-executor/7053: #0: ffff888035972410 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2723 [inline] #0: ffff888035972410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 fs/read_write.c:684 #1: ffff888043b71080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 fs/kernfs/file.c:343 #2: ffff8880286881e8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880286881e8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 fs/kernfs/file.c:344 #3: ffffffff8f641a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:949 [inline] #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1154 [inline] #4: ffff888029b39128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 drivers/base/dd.c:1352 #5: ffff888056278258 (&devlink->lock_key#34){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 drivers/net/netdevsim/netdev.c:1185 2 locks held by dhcpcd/7058: #0: ffff88802d712260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff88802d712260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961 2 locks held by syz-executor/7063: #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 net/core/net_namespace.c:575 #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 net/ipv4/nexthop.c:3993 2 locks held by dhcpcd/7065: #0: ffff88802afe0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff88802afe0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961 1 lock held by dhcpcd/7066: #0: ffff888078e5e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff888078e5e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3199 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xfaa/0x1000 kernel/hung_task.c:515 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63 Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 RAX: 0000000000166bf9 RBX: ffffffff819a67ea RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005613e99b1168 CR3: 0000000035662000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x36a/0x5f0 kernel/sched/idle.c:352 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:451 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x147