Extracting prog: 4h37m12.925372173s Minimizing prog: 59m53.311929081s Simplifying prog options: 0s Extracting C: 3m14.177295707s Simplifying C: 43m6.886418183s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-sync-socket$nl_generic-setsockopt$SO_TIMESTAMP-getsockopt$SO_TIMESTAMP-write$USERIO_CMD_SEND_INTERRUPT-syz_open_dev$ttys-ioctl$KDSKBMODE-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-listen-setsockopt$sock_int-socket$inet6_tcp-sendto$inet6-syz_emit_ethernet-syz_ublk_setup_io_uring-syz_io_uring_submit-syz_ublk_add_dev-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_PUBL_GET-unshare-socket-connect$netlink-syz_usb_connect$hid-syz_usb_connect$uac3-syz_usb_control_io$hid-pipe2$9p-statx-stat-getsockopt$inet6_IPV6_IPSEC_POLICY-socket$nl_netfilter-inotify_init-socket$inet6_sctp-openat$rdma_cm-ioctl$F2FS_IOC_MOVE_RANGE-writev-write$P9_RSTATu detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc2-socket$nl_netfilter-openat$ppp-ioctl$PPPIOCNEWUNIT-sendmsg$nl_route_sched-socket$inet_sctp-setsockopt$IP_VS_SO_SET_ADD-socket$kcm-setsockopt$IP_VS_SO_SET_ADDDEST-setsockopt$IP_VS_SO_SET_ADDDEST-sendmsg$sock-socket$pppoe-syz_usb_connect$midi-connect$pppoe-syz_usb_connect-set_mempolicy-bpf$PROG_LOAD-socket$inet6_icmp_raw-setsockopt$IP6T_SO_SET_REPLACE-openat$nullb-mmap-syz_open_dev$tty1-syz_open_dev$sndpcmc-ioctl$KDGKBTYPE-openat$nullb-dup-mmap-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000001000000bfa30000007f000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed00006203b0ff000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysfs-syz_open_dev$dmmidi-ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32-syz_usb_connect-socket$nl_netfilter-syz_io_uring_submit-socket$nl_generic-socket$kcm-socket$nl_generic-syz_genetlink_get_family_id$tipc-syz_open_dev$video-sendmsg$TIPC_CMD_SET_NODE_ADDR-socket$nl_generic-syz_genetlink_get_family_id$tipc-ioctl$VIDIOC_ENUM_FMT-sendmsg$TIPC_CMD_ENABLE_BEARER-syz_emit_ethernet detailed listing: executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-mmap-syz_pidfd_open-wait4-ioctl$FS_IOC_GETVERSION-socket-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-syz_usb_connect detailed listing: executing program 0: r0 = syz_clone(0x4210e011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x80ce, 0x7800, 0x20, 0x8002, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x27, 0x20, 0xf8, 0x29, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3, 0xf2}]}}}}}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-openat$userio-write$USERIO_CMD_SET_PORT_TYPE-write$USERIO_CMD_REGISTER-sync-socket$nl_generic-setsockopt$SO_TIMESTAMP-getsockopt$SO_TIMESTAMP-write$USERIO_CMD_SEND_INTERRUPT-syz_open_dev$ttys-ioctl$KDSKBMODE-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 12, 29, 30, 9, 3, 12, 2, 29, 2, 16, 4, 2, 26, 19, 12, 19, 3, 3, 4, 9, 2, 2, 2, 27, 2, 2, 17, 30, 30, 12] detailed listing: executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) r1 = syz_ublk_setup_io_uring(0x4907, &(0x7f0000000040)={0x0, 0xa27, 0x400, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x1aa, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0, r0, r3], 0x3) listen(r0, 0x5) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) r6 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={&(0x7f0000000100)="8ca8da41b22ba1bb75147426a806305bb1442b705576ba2f5dbbafafe9cddfd299f3fd3ec85975f19cbf38a7d94b30c94c62bcdeffd493a0cf1c8e25b61694529f609790e0143a90ca60f3c656ff6ded3bbff58e12650f", &(0x7f00000001c0)="2feb2d585a2f335906f788e57f4cfa7e78f201f149fe2a88c2806717a1d950311c709ec8f6031d5156634f125e84976422e96f1fdb0cd750aa4d1397fa37f9fc3b0051f40ac608d91be295682f83aef9933183e4d67329cc1ed13c3d52a721eb120b390f62d24722581bddb18a20edfaaba2bb0bd5e3573cf7fbbd3e67a7"}}) executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000003400)={0x18, 0x0, r1, {0x1000}}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xcddd, 0x10000, 0x2, 0x19a}, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) r7 = accept4$alg(r0, 0x0, 0x0, 0xc0000) close(r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) userfaultfd(0x80001) (async, rerun: 32) inotify_init1(0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (rerun: 64) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000000, 0x18000) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x12) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000080)={0x1, 0xa7, "e829aef8a900e61169c05e9fef14d552af588d253fa8a17ca1fc25dca0377ba44f21dc66d726986df6e88ac6c677f387a095924cc9d9f0af0e420815f8cbeb821384dc161899abc4d5571895412029614cebba7c9655c52874d5401f5dfd07da1824764e8921fbd90f8d64df77ef0303f125578f4a3e9662e1fa582f9cb6779eb3303e1aa65e08d205454970bc55e612a2e0ab4de51e826cb08cf91a6c24def2a2a653f2d0664e"}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0007080001000000000014000800451c003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080007"], 0x4a) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x3, 0x38, {0x38, 0x24, "96d3706fd35e6d3071142e50d4d527e97e2ef39da4f050328f60191bbf6175fe10f6a4f2d77fa9d95c385bf4d8865c69a8c236b7da44"}}, &(0x7f0000000100)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "c974b6ea7bb5dae80c3b09b5ec65131486dae8dc73d36cd58681d32f88922d2cbcecc69310ac9fad6a7b09bd8f4819a6336eeacaeefb6ba0cb3a062fdd0eb042fb29ae8c487cbdee6c7ad83c0f1f322ddf73599062ad3eb76aa8b6cac0ffecbb62067a7ea357a31eb8f364"}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0xbd, "0b7ed0f8141b43e5f5122ba58ab0503d928a2aa8815f6c4ffac40eac362b72a4b1c033a620d228e333d76e6686e3a7fdd8deee9067b8b119172f4318f483f59a103517a111905ae3061249942fa1e0c51f25f6cce9f2d6e7aaa5ee999f0ade65b78da50e1428e69125692008ddbd2302206d975588ad5811ee29e4b74cb226fb6ec381a5f474b765e84fcdedcec6aaa5565be319a40453f0ac3374245c909fe5595ae9d85c455b1cc9bdb9e7d24aae9441547bbea10379dc5f97fbf195"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x52}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000380)={0xc0, 0x5, 0x2, '\v\\'}, &(0x7f00000003c0)={0x40, 0x5, 0x5, "ba477a82f1"}}) (async) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0x100, 0x200, 0x6, 0x40, 0x347}) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000041000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x6, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x10000, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xb3c6}, 0x0) keyctl$restrict_keyring(0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003980)={0xa, 0x0, [{0x4, 0xb9, &(0x7f0000000ac0)=""/185}, {0x100000, 0xd2, &(0x7f0000000540)=""/210}, {0xb000, 0x3f, &(0x7f0000000040)=""/63}, {0x200000, 0x21, &(0x7f0000000e80)=""/33}, {0xffdf9000, 0x9c, &(0x7f0000000ec0)=""/156}, {0x10000, 0xa3, &(0x7f0000000f80)=""/163}, {0xffffffff, 0x1000, &(0x7f0000001800)=""/4096}, {0x10000, 0xb5, &(0x7f0000002800)=""/181}, {0x2, 0x85, &(0x7f0000000640)=""/133}, {0x6000, 0x1000, &(0x7f0000002980)=""/4096}]}) eventfd2(0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300011000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x800, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = memfd_secret(0x80000) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4501}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f4, 0x30, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@nested={0xdc, 0xd3, 0x0, 0x1, [@nested={0x4, 0x8c}, @generic="c75c0aa037c7b1f432546a752b13e8d787fb85ed565d7cae9469f628646557e2f85691329dfef351734e34ccf459c82f7a4d75c2684e54ca28df61b45ad7ca6fca7a264e2fabc4b35d6709d97adb851c220c98f1cf750b691107b3d303e4529cfd7ec2c858f6df5708583d50", @nested={0x4, 0x133}, @generic="b5706fcba885988b48a7a4f37eed5ff1d6e650bf8883ef7b6ad3c976b6f5bef155af1b8a63888bdd007218c71bd1c93a59c6e47a72ee7f11c4cd90e8bf7fab43096ba588d321723fd013ae08601d0c86", @nested={0x4, 0x1d}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@local}]}, @nested={0x101, 0x158, 0x0, 0x1, [@typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}}, @typed={0x8, 0x141, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x67}, @typed={0x8, 0xaf, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x14c, 0x0, 0x0, @u32=0x200}, @generic="6325b351117f6f21ce676b93fe5efcf79c8e1dae46de702752346d8560b71e00e9f97cadfce5f32d3cc1e87fab630824fc556c94c36357f6a7c7c93b3398661bbbe12de8dacaa866d9e295d20ced2d5dc61e9ccedb349fd35fb7236dc38222cdcc40e83713b3203dcada159288ede063906970e4e26b80784c7437297563b093d2ccb443f8230c51184a65397d76e1b220d9f08c6b0d78bcef3d34874a9c93cbcbd085048cbe7acc0e4ae230f71066d3f6d2af774945bf072ef9d75224beab430ceb67d96f2d44eec7", @typed={0xc, 0x142, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x131}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000080)="9e7121c8efc8", 0x6, 0x4880, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000003"]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000840)=0x8, 0x8, 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000880)={0x0, 0x4, 0x8001, 0x4}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xe, 0x5, 0x1, {0x7, 0x25, 0x1, 0xc, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x11, 0x0, {0x7, 0x25, 0x1, 0x0, 0x38, 0x1}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000090000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300012000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) executing program 1: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x32}}], 0x40}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f1b22f820e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f1b22f820e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000580)={0x4, 0x8, 0x3, 0x9, 0x6, 0x0, [{0xfff, 0x8, 0x5, '\x00', 0x80}, {0x1, 0x9, 0xe, '\x00', 0x1}, {0x2, 0xffffffffb6e641a0, 0x4, '\x00', 0x90c}, {0x9, 0x5, 0x2855e3fc, '\x00', 0x80}, {0x3, 0x0, 0xf, '\x00', 0x1}, {0x40, 0x2, 0x2, '\x00', 0x3001}]}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000580)={0x4, 0x8, 0x3, 0x9, 0x6, 0x0, [{0xfff, 0x8, 0x5, '\x00', 0x80}, {0x1, 0x9, 0xe, '\x00', 0x1}, {0x2, 0xffffffffb6e641a0, 0x4, '\x00', 0x90c}, {0x9, 0x5, 0x2855e3fc, '\x00', 0x80}, {0x3, 0x0, 0xf, '\x00', 0x1}, {0x40, 0x2, 0x2, '\x00', 0x3001}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) r1 = syz_ublk_setup_io_uring(0x4907, &(0x7f0000000040)={0x0, 0xa27, 0x400, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x1aa, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0, r0, r3], 0x3) listen(r0, 0x5) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) r6 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r1, r2, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x4, 0x3, 0x3, 0x4000000000804, 0xfffffffd, 0x6, {0x0, 0x0, 0x7, 0x120000000000, 0x2000000000000db6, 0x85, 0x200, 0x6, 0x200c, 0xa000, 0xe44, r1, r2, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r3 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xc17, 0x70bd29, 0x4000000, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0x4}, {0xf, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf8}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x401}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48090}, 0x4001) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200007, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000010000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x40044) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) executing program 0: r0 = syz_clone(0x4210e011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x80ce, 0x7800, 0x20, 0x8002, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x27, 0x20, 0xf8, 0x29, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3, 0xf2}]}}}}}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="96e2f9278546dcf06e4c25049a5a2cb0f68ebdcd2748ecfbac888ab76aca89bb41aebc46908f5d1c911813cb44cc2bafeab7a32ab7bcfb8eb5b52604199a8b88dcade0d5e58a7caf34977a82be83a0c308ccc7f972c9dd9b2d365734e9ee5750d471bf373098a88476775af346d8cd65742f480c011f27a593b34bfe42eebe87309a8b66c6491082b5b8574c2c316b4ef39e83c4489855f58a95fd4ae2e25a7d5dd162824bf3538380f024fac1f453be090207afe6092c2f1c16d1d6", 0xbc}], 0x1) (fail_nth: 38) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001"], 0xf0}, 0x1, 0x60}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000001000000bfa30000007f000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed00006203b0ff000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: no output from test machine bisect: bisecting 31 programs bisect: split chunks (needed=false): <31> bisect: split chunk #0 of len 31 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 26, 19, 12, 19, 3, 3, 4, 9, 2, 2, 2, 27, 2, 2, 17, 30, 30, 12] detailed listing: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000090000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300012000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) executing program 1: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x32}}], 0x40}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f1b22f820e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f1b22f820e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000580)={0x4, 0x8, 0x3, 0x9, 0x6, 0x0, [{0xfff, 0x8, 0x5, '\x00', 0x80}, {0x1, 0x9, 0xe, '\x00', 0x1}, {0x2, 0xffffffffb6e641a0, 0x4, '\x00', 0x90c}, {0x9, 0x5, 0x2855e3fc, '\x00', 0x80}, {0x3, 0x0, 0xf, '\x00', 0x1}, {0x40, 0x2, 0x2, '\x00', 0x3001}]}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000580)={0x4, 0x8, 0x3, 0x9, 0x6, 0x0, [{0xfff, 0x8, 0x5, '\x00', 0x80}, {0x1, 0x9, 0xe, '\x00', 0x1}, {0x2, 0xffffffffb6e641a0, 0x4, '\x00', 0x90c}, {0x9, 0x5, 0x2855e3fc, '\x00', 0x80}, {0x3, 0x0, 0xf, '\x00', 0x1}, {0x40, 0x2, 0x2, '\x00', 0x3001}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) r1 = syz_ublk_setup_io_uring(0x4907, &(0x7f0000000040)={0x0, 0xa27, 0x400, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x1aa, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0, r0, r3], 0x3) listen(r0, 0x5) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) r6 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r1, r2, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c43630454a00000000979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81bd41514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee96a3d75b56ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf480400000000000000b29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadc779c0ce7437c946aabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac9b7c843e647bebeddc33f9df0201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e345958224edd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e6200d12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e00", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x4, 0x3, 0x3, 0x4000000000804, 0xfffffffd, 0x6, {0x0, 0x0, 0x7, 0x120000000000, 0x2000000000000db6, 0x85, 0x200, 0x6, 0x200c, 0xa000, 0xe44, r1, r2, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r3 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xc17, 0x70bd29, 0x4000000, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0x4}, {0xf, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf8}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x401}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48090}, 0x4001) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200007, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000010000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x40044) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) executing program 0: r0 = syz_clone(0x4210e011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x80ce, 0x7800, 0x20, 0x8002, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x27, 0x20, 0xf8, 0x29, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3, 0xf2}]}}}}}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="96e2f9278546dcf06e4c25049a5a2cb0f68ebdcd2748ecfbac888ab76aca89bb41aebc46908f5d1c911813cb44cc2bafeab7a32ab7bcfb8eb5b52604199a8b88dcade0d5e58a7caf34977a82be83a0c308ccc7f972c9dd9b2d365734e9ee5750d471bf373098a88476775af346d8cd65742f480c011f27a593b34bfe42eebe87309a8b66c6491082b5b8574c2c316b4ef39e83c4489855f58a95fd4ae2e25a7d5dd162824bf3538380f024fac1f453be090207afe6092c2f1c16d1d6", 0xbc}], 0x1) (fail_nth: 38) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001"], 0xf0}, 0x1, 0x60}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000006000000000000000000200000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000004000000000000000000000000020000000000020000000000000084010500fc010000000000000000000000000001fffffffc2b00000000000000ac141418000000000000000000000000000000000000fb0000000000093f0d5100000000ffffffff000000000000000000000000000000002b00000002000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000007000000d62c000003000000ac14142a000000000000000000000000000004d63c00000002000000ac1414aa00000000000000000000000000000000040000000000000003000000000000007f00000100000000000000e7ffffffffffffff003c00000002000000fe800000000000000000000000000022ffffffff00000000fdffffff00000000000000006401df4c5dcba54d970100000000000000000000000000000000003200000002000000ffffffff0000000000000000b713"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: INFO: task hung in sync_inodes_sb bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 27, 2, 2, 17, 30, 30, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001"], 0xf0}, 0x1, 0x60}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: INFO: task hung in serio_unregister_port bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <9> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30, 30, 12] detailed listing: executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 27, 2, 2] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001"], 0xf0}, 0x1, 0x60}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) program did not crash bisect: split chunks (needed=true): <5>, <4> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 17, 30, 30, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001"], 0xf0}, 0x1, 0x60}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 27, 17, 30, 30, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000005f00001122334411223344"}}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: INFO: task hung in reg_process_self_managed_hints bisect: the chunk can be dropped bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 27, 30, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 12] detailed listing: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10990}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20200, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdffc, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x7) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0xffffffffffffffff, 0x170bd28, 0x108000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0xffffffffffffffef, 0xb8, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4008001) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 30, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 32: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000400)) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0x436}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xff, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0xff, 0x31}, 0xdf, &(0x7f00000000c0)={0x5, 0xf, 0xdf, 0x5, [@generic={0x97, 0x10, 0x0, "77c296888bb682a7080e1d7ffe1fd054ea68f792fbed63f2902423d070ec11d7c78ec7eef4d02b9e73be69b1d6e7dc83cc686ff2623413eb6bf1b22de71f08414101976fe9d903486f8db291a01f98c25920960ff82abb9b461546cc55c2885e892d6b8850d7672cb2d05f024d761dd103f8ecae273718f1770cc63774014d0c1f74a4cea44b7e6c32365abc26d2de7dcfa6105d"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x4, 0xf00, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xc, 0xf, 0x0, [0xc0ff, 0xff003f, 0x0, 0xff, 0xffc050]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "4aa3ed89313f2b642a49f33796825030"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "4f4d65c9b85b8abe16cb8f4ca30c92b89a342cca9d1369dba977f93ab44a364933007274d8696946c5b1e5b4f47335c4c68239fde71e4402f6a920d177"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000300)=@string={0x74, 0x3, "42f4b8223711a3a021e8f2d930c4e70d1ff30bf564e700a23dc6781304f9a7f93821284f59e73f34c72e92e2bae8fde4eeb9564027a8ea371a28ab03abd5e2771cc2ae9913588f0beb8554932159546f37922398da34e5251127c0c238c66c7673a019af8a9d0a611c27aea731d0685de345"}}]}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 30] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program crashed: no output from test machine bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000080ffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1>, <1, final> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30] detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r14, 0x0, 0x3}) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) write$P9_RSTATu(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="4d0000007d0100000037009a2e2a8f3177c2f08ac4793c0b6eb40180a90600000803000000030000000000000000000020050000000d000000010000000000000001002a01000001002e01000001002f", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x4d) program did not crash minimized 2 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r10, 0x0, 0x3}) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) program crashed: INFO: task hung in crda_timeout_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r10, 0x0, 0x3}) program crashed: INFO: task hung in crda_timeout_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 27] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) program crashed: INFO: task hung in netdev_work_proc testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) program crashed: INFO: task hung in crda_timeout_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 25] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 24] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000440)) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) program crashed: INFO: task hung in reg_process_self_managed_hints testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000380)=ANY=[@ANYBLOB="120110010000002082058205400001020301090281000301048000080b0002012330090904000000010130000a2401061d00ff7f0000092410000c009d00d80a24100900100002041a0904010000010230000904010101ff"], 0x0) program crashed: INFO: task hung in hci_conn_failed testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) r8 = socket(0x10, 0x80002, 0x2) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) program crashed: INFO: task hung in switchdev_deferred_process_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) socket(0x10, 0x80002, 0x2) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) unshare(0x8040480) program crashed: INFO: task hung in netdev_work_proc testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r7, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) program crashed: INFO: task hung in crda_timeout_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in crda_timeout_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x4, 0x4004, @fd=r2, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, 0x0, 0x80, '\x00', &(0x7f0000000740)={0x400, 0x1, 0x0, &(0x7f0000000300)="16635d8b8f08c01d8f08d80ed8b9ebefce61f16d1dc871ce7a9354402d4b3ba8100e827e185d914aef92d68078", 0x7}, 0x8}}) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x3, 0x33f}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) program crashed: INFO: task hung in switchdev_deferred_process_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x341, &(0x7f0000000840)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xc09c}, {0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x9, 0x6, "a7cefb", 0x2f7, 0x0, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[@fragment={0x6c, 0x0, 0x21, 0x0, 0x0, 0x3, 0x66}, @srh={0x4c, 0x4, 0x4, 0x2, 0x7, 0x20, 0x1000, [@dev={0xfe, 0x80, '\x00', 0x28}, @local]}, @srh={0x62, 0x4, 0x4, 0x2, 0x3, 0x10, 0xa, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x2f, 0x12, 0x4, 0x9, 0x80, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}, @dstopts={0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0xc, 0x3}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @dstopts={0xae, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf2, 0x800, [0x7d6, 0x5cff, 0x100000000]}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, @dstopts={0xe4c2ca1dc2ce0b38}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x4ec, [0x6, 0xd288]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0xff, [0x8, 0x1000000000]}}]}], "d2d223dd07b98d081d9f9bfffecdbca7b7a902df54c632ebeceb942efec7a168e3af5d0ea4c7c8df1cde683d1843523102df08ea800260d1fc87999611862f4b3765bac94a654c1e8ae8d031ffbd0ae999088ffa600b21fe6997629019cc340717dd75dc0d75eb6e01faffd9191ed0d4940002a0e02799ae55c05a5011f6780e5dc077460c251dbcd2e3054900649cbdbe26ccd5d5a88fd342cc2c9800f09b2201e64bae20311590c5f1d9cfe6e1d388bc9b9a892c56ec5dcd1408be58097f157a4a470a55e982f1036c071037f0c6ab4a8579616669876d9bd846f543cefb8c637430bf31e76dea9948374f4149765ebd19f26e455e59"}}}}}}, 0x0) program crashed: INFO: task hung in reg_process_self_managed_hints testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: INFO: task hung in tun_chr_close testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: INFO: task hung in addrconf_dad_work minimized 30 calls -> 2 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: INFO: task hung in inet_rtm_newaddr bisect: concatenation succeeded found reproducer with 4 syscalls minimizing guilty program testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash testing program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m17.711642956s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f net/ipv4/devinet.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: INFO: task hung in inet_rtm_newaddr simplifying C reproducer testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f net/core/netdev_work.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: INFO: task hung in netdev_work_proc testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing compiled C program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 program crashed: no output from test machine testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program crashed: no output from test machine validation run: crashed=true testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) program did not crash validation run: crashed=false testing program (duration=6m17.711642956s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f net/ipv6/addrconf.c]: fork/exec scripts/get_maintainer.pl: no such file or directory program crashed: INFO: task hung in addrconf_dad_work validation run: crashed=true reproducing took 7h27m7.56195608s repro crashed as (corrupted=false): INFO: task kworker/u8:3:50 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:24712 pid:50 tgid:50 ppid:2 task_flags:0x4208160 flags:0x00080000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7277 __schedule_loop kernel/sched/core.c:7354 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7369 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7426 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 rtnl_net_lock include/linux/rtnetlink.h:134 [inline] addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/u8:0/12: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88802c4f3258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834 locks held by kworker/1:1/30: 3, last CPU#1: #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b46f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822 locks held by khungtaskd/32: 1, last CPU#1: #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:3/50: 3, on CPU#0: #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 locks held by kworker/u8:4/78: 3, last CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880289b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff8880289b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/u8:6/724: 3, on CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by kworker/0:2/988: 4, last CPU#0: #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b8bd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff88807b46e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by kworker/u8:8/3025: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888079d50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888079d50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:2/3194: 3, on CPU#1: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 locks held by klogd/4971: 1, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by udevd/4982: 2, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by dhcpcd/5276: 1, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by dhcpcd/5277: 5, last CPU#0: #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1542 [inline] #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 kernel/fork.c:1595 #1: ffff88807bf31d38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #1: ffff88807bf31d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 mm/mmap.c:1716 #2: ffff8880366b5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:552 [inline] #2: ffff8880366b5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 mm/mmap.c:1723 #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by getty/5370: 2, on CPU#0: #0: ffff88803268c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by kworker/0:4/5694: 3, last CPU#0: #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b8b9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 locks held by syz-executor/5745: 1, last CPU#0: #0: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline] #0: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587 locks held by kworker/u8:9/5806: 5, last CPU#0: #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: local_lock_acquire include/linux/local_lock_internal.h:46 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 net/core/dev.c:6724 #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 net/ipv6/ip6_input.c:544 #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323 locks held by kworker/0:5/5810: 3, last CPU#0: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1532 locks held by kworker/1:7/5811: 2, last CPU#1: #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by syz-executor/5812: 1, last CPU#0: #0: ffff88801df9a370 (&sig->exec_update_lock){++++}-{4:4}, at: call_proc_get_link fs/proc/base.c:1784 [inline] #0: ffff88801df9a370 (&sig->exec_update_lock){++++}-{4:4}, at: proc_pid_readlink+0x10f/0x3d0 fs/proc/base.c:1845 locks held by udevd/5813: 4, last CPU#0: #0: ffff88801bf905a8 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_open+0x5a/0xce0 fs/kernfs/file.c:612 #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_node_lock fs/kernfs/kernfs-internal.h:229 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_open_file_mutex_lock fs/kernfs/file.c:51 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_get_open_node fs/kernfs/file.c:531 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_open+0x709/0xce0 fs/kernfs/file.c:711 #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5806 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: bat_events batadv_dat_purge RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:81 [inline] RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:103 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline] RIP: 0010:unwind_next_frame+0x4f4/0x2550 arch/x86/kernel/unwind_orc.c:510 Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 RSP: 0018:ffffc90000006dc0 EFLAGS: 00000a07 RAX: 0000000000000000 RBX: ffffffff90efe34c RCX: dffffc0000000000 RDX: ffffffff90efe33c RSI: ffffffff919cce18 RDI: ffffffff8c6da720 RBP: ffffffff89b57259 R08: 0000000000000009 R09: 0000000000000000 R10: ffffc90000006eb8 R11: ffffffff81b28ab0 R12: ffffffff90efe35c R13: ffffffff90efe33c R14: ffffc90000006e68 R15: ffffffff90efe33c FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fba60993070 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_node_noprof+0x354/0x610 mm/slub.c:5068 __alloc_skb+0x1db/0x7a0 net/core/skbuff.c:704 alloc_skb include/linux/skbuff.h:1384 [inline] synproxy_send_client_synack_ipv6+0x16e/0xcd0 net/netfilter/nf_synproxy_core.c:883 nft_synproxy_eval_v6+0x362/0x4e0 net/netfilter/nft_synproxy.c:90 nft_synproxy_do_eval+0x3d1/0x550 net/netfilter/nft_synproxy.c:145 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:545 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6264 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] process_backlog+0x795/0x18b0 net/core/dev.c:6728 __napi_poll+0xaa/0x330 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8007 handle_softirqs+0x226/0x860 kernel/softirq.c:645 do_softirq+0x77/0xd0 kernel/softirq.c:546 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 spin_unlock_bh include/linux/spinlock.h:407 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:252 [inline] batadv_dat_purge+0x2d7/0x3c0 net/batman-adv/distributed-arp-table.c:271 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task kworker/u8:3:50 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:24712 pid:50 tgid:50 ppid:2 task_flags:0x4208160 flags:0x00080000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7277 __schedule_loop kernel/sched/core.c:7354 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7369 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7426 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 rtnl_net_lock include/linux/rtnetlink.h:134 [inline] addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/u8:0/12: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88802c4f3258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834 locks held by kworker/1:1/30: 3, last CPU#1: #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b46f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822 locks held by khungtaskd/32: 1, last CPU#1: #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:3/50: 3, on CPU#0: #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880333df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 locks held by kworker/u8:4/78: 3, last CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880289b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff8880289b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/u8:6/724: 3, on CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004387c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by kworker/0:2/988: 4, last CPU#0: #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88807eea4d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b8bd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff88807b46e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by kworker/u8:8/3025: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888079d50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888079d50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:2/3194: 3, on CPU#1: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000dfffc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 locks held by klogd/4971: 1, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by udevd/4982: 2, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by dhcpcd/5276: 1, last CPU#0: #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by dhcpcd/5277: 5, last CPU#0: #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1542 [inline] #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 kernel/fork.c:1595 #1: ffff88807bf31d38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #1: ffff88807bf31d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 mm/mmap.c:1716 #2: ffff8880366b5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:552 [inline] #2: ffff8880366b5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 mm/mmap.c:1723 #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by getty/5370: 2, on CPU#0: #0: ffff88803268c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by kworker/0:4/5694: 3, last CPU#0: #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88807b8b9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 locks held by syz-executor/5745: 1, last CPU#0: #0: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline] #0: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587 locks held by kworker/u8:9/5806: 5, last CPU#0: #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880335eb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90004017c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: local_lock_acquire include/linux/local_lock_internal.h:46 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 net/core/dev.c:6724 #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 net/ipv6/ip6_input.c:544 #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323 locks held by kworker/0:5/5810: 3, last CPU#0: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900038f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1532 locks held by kworker/1:7/5811: 2, last CPU#1: #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888025cc4140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90003427c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by syz-executor/5812: 1, last CPU#0: #0: ffff88801df9a370 (&sig->exec_update_lock){++++}-{4:4}, at: call_proc_get_link fs/proc/base.c:1784 [inline] #0: ffff88801df9a370 (&sig->exec_update_lock){++++}-{4:4}, at: proc_pid_readlink+0x10f/0x3d0 fs/proc/base.c:1845 locks held by udevd/5813: 4, last CPU#0: #0: ffff88801bf905a8 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_open+0x5a/0xce0 fs/kernfs/file.c:612 #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_node_lock fs/kernfs/kernfs-internal.h:229 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_open_file_mutex_lock fs/kernfs/file.c:51 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_get_open_node fs/kernfs/file.c:531 [inline] #1: ffff888140418b88 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_open+0x709/0xce0 fs/kernfs/file.c:711 #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5806 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: bat_events batadv_dat_purge RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:81 [inline] RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:103 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline] RIP: 0010:unwind_next_frame+0x4f4/0x2550 arch/x86/kernel/unwind_orc.c:510 Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 RSP: 0018:ffffc90000006dc0 EFLAGS: 00000a07 RAX: 0000000000000000 RBX: ffffffff90efe34c RCX: dffffc0000000000 RDX: ffffffff90efe33c RSI: ffffffff919cce18 RDI: ffffffff8c6da720 RBP: ffffffff89b57259 R08: 0000000000000009 R09: 0000000000000000 R10: ffffc90000006eb8 R11: ffffffff81b28ab0 R12: ffffffff90efe35c R13: ffffffff90efe33c R14: ffffc90000006e68 R15: ffffffff90efe33c FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fba60993070 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_node_noprof+0x354/0x610 mm/slub.c:5068 __alloc_skb+0x1db/0x7a0 net/core/skbuff.c:704 alloc_skb include/linux/skbuff.h:1384 [inline] synproxy_send_client_synack_ipv6+0x16e/0xcd0 net/netfilter/nf_synproxy_core.c:883 nft_synproxy_eval_v6+0x362/0x4e0 net/netfilter/nft_synproxy.c:90 nft_synproxy_do_eval+0x3d1/0x550 net/netfilter/nft_synproxy.c:145 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:545 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6264 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] process_backlog+0x795/0x18b0 net/core/dev.c:6728 __napi_poll+0xaa/0x330 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8007 handle_softirqs+0x226/0x860 kernel/softirq.c:645 do_softirq+0x77/0xd0 kernel/softirq.c:546 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 spin_unlock_bh include/linux/spinlock.h:407 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:252 [inline] batadv_dat_purge+0x2d7/0x3c0 net/batman-adv/distributed-arp-table.c:271 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245