Extracting prog: 2h2m13.731441539s Minimizing prog: 1h56m29.276408925s Simplifying prog options: 0s Extracting C: 6m45.606067623s Simplifying C: 48m26.659146586s extracting reproducer from 42 programs testing a last program of every proc single: executing 12 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac3-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ADDFB2-openat$sndseq-ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO-openat$sndseq-read-ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL-openat$sndseq-socket$nl_generic-syz_usb_connect$hid-socket$netlink-syz_usb_control_io$hid-syz_usb_control_io-socket$inet6_sctp-close-socket$inet6_sctp-ioctl$KVM_GET_STATS_FD_vm-setsockopt-socket$unix-bind$unix-sendmsg$nl_generic-ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-bpf$PROG_LOAD-socket$inet-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFFLAGS-socket$inet_sctp-bind-listen-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-bpf$PROG_LOAD-socket$inet-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFFLAGS-socket$inet_sctp-bind-listen-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETPERSIST-ioctl$TUNSETQUEUE-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-socket-ioctl$sock_SIOCGIFINDEX-socket$kcm-socket-sendmsg$nl_route_sched-setsockopt$sock_attach_bpf-sendmsg$kcm-socket$unix-ioctl$sock_SIOCGIFINDEX-socket$nl_route-sendmsg$nl_route_sched-sendto$inet6-setsockopt$inet_sctp6_SCTP_RECVRCVINFO-recvmmsg detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-socketpair$unix-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$inet6_icmp_raw-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-openat-write$cgroup_int-prctl$PR_SCHED_CORE-sendmsg$NL80211_CMD_SET_MCAST_RATE-sched_setattr-execveat$binfmt-writev-ioctl$sock_SIOCGIFINDEX-socket$inet_sctp-socket-sendmsg$nl_route-ioctl$F2FS_IOC_SEC_TRIM_FILE detailed listing: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETPERSIST-ioctl$TUNSETQUEUE-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-socket-ioctl$sock_SIOCGIFINDEX-socket$kcm-socket-sendmsg$nl_route_sched-setsockopt$sock_attach_bpf-sendmsg$kcm-socket$unix-ioctl$sock_SIOCGIFINDEX-socket$nl_route-sendmsg$nl_route_sched-sendto$inet6-setsockopt$inet_sctp6_SCTP_RECVRCVINFO-recvmmsg detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-socketpair$unix-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$inet6_icmp_raw-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-openat-write$cgroup_int-prctl$PR_SCHED_CORE-sendmsg$NL80211_CMD_SET_MCAST_RATE-sched_setattr-execveat$binfmt-writev-ioctl$sock_SIOCGIFINDEX-socket$inet_sctp-socket-sendmsg$nl_route-ioctl$F2FS_IOC_SEC_TRIM_FILE detailed listing: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-socketpair$unix-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$inet6_icmp_raw-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-openat-write$cgroup_int-prctl$PR_SCHED_CORE-sendmsg$NL80211_CMD_SET_MCAST_RATE-sched_setattr-execveat$binfmt-writev-ioctl$sock_SIOCGIFINDEX-socket$inet_sctp-setsockopt$IP_VS_SO_SET_EDITDEST-socket-sendmsg$nl_route detailed listing: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x84, 0x489, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-socketpair$unix-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$inet6_icmp_raw-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-openat-write$cgroup_int-prctl$PR_SCHED_CORE-sendmsg$NL80211_CMD_SET_MCAST_RATE-sched_setattr-execveat$binfmt-writev-ioctl$sock_SIOCGIFINDEX-socket$inet_sctp-setsockopt$IP_VS_SO_SET_EDITDEST-socket-sendmsg$nl_route detailed listing: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x84, 0x489, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io-openat$uhid-write$UHID_CREATE2-mmap-syz_open_dev$hidraw-ioctl$HIDIOCGFEATURE-write$UHID_GET_REPORT_REPLY-ioctl$sock_SIOCETHTOOL-mprotect-syz_usb_ep_write$ath9k_ep1-readv detailed listing: executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000280)={0x0, "1f7f67361b5a90ee941e94a4031a82680d00902d0008424ad04b9634bef178be4ba64223a1d6f36d232b4ea6a469724e5a9c93a204ec2471559600"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x9, 0x4, 0x1}}, 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x100, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x5, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0x10000, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x6, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x8, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7c, 0x1, 0x3, 0xffffff38, 0x92, 0x1, 0x8001, 0xf, 0x63]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$printer-syz_usb_control_io-openat$uhid-write$UHID_CREATE2-mmap-syz_open_dev$hidraw-ioctl$HIDIOCGFEATURE-write$UHID_GET_REPORT_REPLY-ioctl$sock_SIOCETHTOOL-mprotect-syz_usb_ep_write$ath9k_ep1-readv detailed listing: executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000280)={0x0, "1f7f67361b5a90ee941e94a4031a82680d00902d0008424ad04b9634bef178be4ba64223a1d6f36d232b4ea6a469724e5a9c93a204ec2471559600"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x9, 0x4, 0x1}}, 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x100, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x5, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0x10000, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x6, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x8, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7c, 0x1, 0x3, 0xffffff38, 0x92, 0x1, 0x8001, 0xf, 0x63]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$rds-ioctl$ifreq_SIOCGIFINDEX_team-sendmmsg$inet-openat$hwrng-creat-socket-socket$rds-signalfd4-setsockopt$inet_mreqn-socket$nl_route-sendmsg$nl_route-sendmsg$AUDIT_USER-openat$qrtrtun-ioctl$VIDIOC_CREATE_BUFS-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-open_tree-ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_FEATURES_SET-inotify_init-ioctl$F2FS_IOC_SEC_TRIM_FILE-fanotify_init-fanotify_mark-ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS-ioctl$BLKTRACESETUP-ioctl$TIOCGSID-kcmp$KCMP_EPOLL_TFD-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_INTERFACE detailed listing: executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="d81ad798a040f7b66a334f82cdc5a22f6d780a3e0fbb1a12f26f42801bf1a15d26e4a8e4c224b81e000a326121a9bdf3cfd87cb3631322e9899993d106d9e32eb7fd36d4c9b43a7edad3bf7e3fedef25ab7897697bf463fbc51d", 0x5a}, {&(0x7f00000000c0)="42d5764ea36dcb41077e2a5e76c23d93677571b95eb0bac1bdbf6bf22bf95caf0b657bf0f9f915a1f256bf3fb268c5f8834bf3e1f42b6786a5785a1218609ba7d514d4b55ac65f44d9d75ffb87f8a24197c6b9dd661bb9794271dbb4f2025bed9f1fc88a9d782d9d33a8105dd70b7b1ff859192c19ac5bef76f57b2bf2876ab0eb962bbe01d5b9c0f8646398413e0a33b7a7ae", 0x93}, {&(0x7f0000000180)="4697b1a37db35db0e95dcfad2303a21c0cd373db546a20b040650268e42dbecbcb3254461a7f3473df68756af3b7f41ef42b8d310a7e780d564ba5fef1d406d5d3e014148a38493d81f7d7bea43de642032d145e856beb3b604067c2eec1981a41edb350697d6af878d25557c630216de575d7ea99f30e9a638142921d3954cbb0f2185e72f1d42cbe26db44612744526db7f3580a38aefe2cfe99d87ca12464a52f33dcf7a9ac2808d7d59dd7caddd15a771dcac19f8aee21a281ff54f9f4987cc2317bc557ca3aef9c6dfb1a740ca7299dad141870e6a89e27195c5554884fd7a13557b6863da3b59c8734e4", 0xed}], 0x3, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4d09}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xc0, [@broadcast, @loopback]}, @ssrr={0x89, 0xb, 0x52, [@remote, @remote]}, @rr={0x7, 0x2b, 0xd2, [@private=0xa010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x8, 0x6, [{0x6, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf8}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000400)="a3f8b580dadce1a4cb800506e2c88f79d8f92d5a69b2b7ca692a68f6c7fa484f62464c4edb1990de75f0826377f74df866c0da83405cd93b19", 0x39}, {&(0x7f0000000440)="12deb57824c769e65d1907436a4257aa8d954c4e4d9df1c9f8f59769ee029c38e87a15d99060a1436a65fabceb65ef0d710636df12151036cb007c7ee2873ba63f557106249d86abe4d9709f0d481f0882a8ec6b86af5b", 0x57}, {&(0x7f00000004c0)="294c5fb7015445e81bfa68036401c07b3691d25501cce55f6adcdf7e5fa419ddff4714", 0x23}, {&(0x7f0000000500)="9656a9fea7b5bdd188d663a71f18eeb4ffe5e13377016e28e96a60edecee72c970ceef59d565630fc7ffe8ef10ac553ba8683db95c2f8b0bd29a6854178cda5c521474bfd7b519a1ea356fa8baa42d2526880bf97ca725cadf6048cce02cc16cc8d189289419e7e0aad22f21c2e1fdbd4d8d2a6abd47bb2439740c9f78d871c5f69531a1c417b2f3e2b24dad68d82ea99b7306faca917f5c3f6751b5429741f182093671b2f3cc25a6ef9f4391f7d971d6c045f2abebd8be0d2b0584ab0c07700cc6ff2a788fd741b1905846b9d224", 0xcf}, {&(0x7f0000000600)="ca7ead4d3a34c0fc4a5747ac6f3865d7fc74bb5d509184cca966ef145488892a4e141605f66eea640600d909b2334c6aab20a83c73002411c6e541230a0864365f8d0b1127bb8d35e150d9887cce16cef363f1716f81f45ebe", 0x59}, {&(0x7f0000000680)="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", 0x1000}], 0x6}}, {{&(0x7f0000001700)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000001740)="50de8a6955eaafd8314d49bec941d4bbfe6258a5a6ca9860c043353c55ceb35ed5bab6633860ad89e188", 0x2a}, {&(0x7f0000001780)="33113ad13cee17c7a51971ad6486a76e49b3bbf8629d61ba4df5734f05ea142fb04a963ada24a685ac4111942d78a13bee8484c3c0e0009229732617249e82efb96c20d93e33f6f54dfb7bd05e214a02b92e99bc8321788404ab8dbbed192b82201ecd17ad0d9f93f21549d428ccc2b564a622d57cc9c60ac2445609c3e5bbb9c0b9f8ad7d4d5a99c7c3c27ecdeccd79502e564e71f218254bb6a98da65a51049cdc6db1e8bda0c7916aa76a0ddb27df6b4d824caa39a3e9c367a19d2ea9e9571c3c49a3c9eca873a6c299f7f3231c3a221f0a7fd85ba2e7b854e8373e6a9d27aa71660619b58b6163e73d1d569a", 0xee}, {&(0x7f0000001880)="451a3fc17f79de7247f80f65a58840c6bfd8696f2ce125cad48c8e524a638bb760ad16258856635f97e00e2036e2695123e03f", 0x33}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="03f2d4a45ffdf520c8c6d46a5108cbe4ef54754391c50d0702d86e43aa59728d92945923067dd609ae9b3b898e9d85b9112897f0361a8ef84a756dc8d2d6fc167c3c4ce4806c5626ded241ef4bbca2eb8b386559d70c0937b92884816f56a1a901007d738a0be7bc6f270618a6dc5e1f9f85b1942d91c174bcd934e1df6f56738aaf7f", 0x83}, {&(0x7f0000002980)="a51c4f8732d66705d9a2afb1c60de69eea8dd795cb853afc6f434ec234205ff538601d0bc9e6225fbf2731dd36b045f33bb1df73fac8a284a383b7dc799c40c698b1b2e30a35b15d5249c8e1512e6dfd8f300287c1fd41015391e901c129008781747a35c37df35c7f33d4c860ef11dcc35194cc3c98ff4b4966cdb8fa62caef036bad0d", 0x84}, {&(0x7f0000002a40)="0cca", 0x2}, {&(0x7f0000002a80)="20f67b227b4ddfddd87a3cca98c7ded32b1b7fbad1f33061c6bfe5e2d94f9ce778a5c66854d893d55d6c154c32d897dd54c7d7168021a741e7c09600c59f6f0d8f02be5a667b057024ea96163f6155fac8d1cae9437c21becb222a5a40f18cb39f68dd58834fe1aa894496d35433cd9cb20a3aa7601d43b2dbeb62ba", 0x7c}], 0x8, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1}}}], 0x20}}, {{&(0x7f0000002c00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002c40)="4b27323352747658c0120f519707fa1f585d4f64400673ca0a4a414794ed43e68b98ef565fe382414350244b20d0a861bc6bc96d3a9d7e23d2f34a1bc8570b105d9fcaa5646d7cde665ab0e8fbd9190cd6be7b1ce697e976083a5cd38bac5809b2a64d6fee7119d2c7e93ee8ddcfb17585b7d2944f463292c46841631234d5a8f5618e089712a7da815175e491f1c69d69cff2a5c01d9bef", 0x98}, {&(0x7f0000002d00)="ecab6b4d95b35554026230855f7ca7401083c89143b1eeffb37b2e42d9da75f261fb2fb5ca3d5a97d8f045558f01767c9ce7d285e5d7a6e5b36131eb1c3317e21c8c655b648d", 0x46}], 0x2, &(0x7f0000002dc0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1f, 0xa5, [@multicast2, @empty, @multicast2, @empty, @multicast2, @multicast1, @loopback]}, @generic={0x44, 0x5, "ebb6d8"}, @generic={0x7, 0x5, "2a65d0"}, @rr={0x7, 0x2b, 0x8d, [@remote, @local, @private=0xa010100, @remote, @rand_addr=0x64010100, @broadcast, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x80}}], 0x4, 0x44044) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002f40), 0x200, 0x0) r3 = creat(&(0x7f0000002f80)='./file0\x00', 0x4e) r4 = socket(0x1f, 0x0, 0x45) socket$rds(0x15, 0x5, 0x0) r5 = signalfd4(r0, &(0x7f0000002fc0)={[0x40]}, 0x8, 0x80000) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000003000)={@empty, @empty, r1}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)=@ipv6_getnexthop={0x34, 0x6a, 0x8, 0x70bd28, 0x1, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000c05) sendmsg$AUDIT_USER(r3, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x60, 0x3ed, 0x0, 0x70bd2c, 0x25dfdbfb, "2e1cafbb930da4977fb4aca6ae38fca4d389a28510d1fcf38a71c997193dcab0c9e8d95984cb8d528a93af656863f0e7777cd93a57d4db52770a4c0fad0d80f3bd408f162e7ff253ed9a29136a9549", ["", "", "", "", "", "", "", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003280), 0x2122c0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000032c0)={0x0, 0x9, 0x4, {0xd, @sliced={0x5, [0x1, 0x7, 0x1ff, 0x35, 0xc, 0xfb, 0xe, 0xf3, 0x8, 0x9, 0x9, 0x4, 0x0, 0x2, 0x6, 0x3, 0x8, 0x4b57, 0x8000, 0x40, 0x4, 0x6f, 0x401, 0x6, 0x0, 0x1, 0x247, 0x7, 0x7, 0xe, 0xc892, 0x1, 0x8, 0x3f1, 0x1ff, 0x8, 0x2, 0x400, 0x7b, 0x8, 0x7, 0x5, 0x0, 0xd9f, 0x550, 0xbda, 0x0, 0x9], 0x200}}, 0x8}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003480)={'gretap0\x00', &(0x7f00000033c0)={'erspan0\x00', r1, 0x8, 0x80, 0x2, 0x6, {{0x1e, 0x4, 0x3, 0x0, 0x78, 0x66, 0x0, 0x94, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xf, "3b18de6ab85858454f15c3c8a3"}, @noop, @timestamp={0x44, 0xc, 0x83, 0x0, 0x7, [0x9, 0x4]}, @ssrr={0x89, 0x7, 0xc0, [@multicast1]}, @timestamp={0x44, 0x8, 0x96, 0x0, 0xd, [0x8]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x12, "2afe471fba69cc3fbeb423007b61b3da"}, {0x1, 0xf, "3a2a1e13f96ba9a142b3171ea7"}, {0x8c80de97fcd48c00, 0xf, "7723952f3d2e8b7da5e76ff288"}]}, @noop]}}}}}) r9 = open_tree(r5, &(0x7f00000034c0)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000003500)={{0xa, 0x8}, {0x4c, 0x4}, 0x8, 0x1, 0x6}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000035c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000038c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003880)={&(0x7f0000003600)={0x250, r10, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "7d66ab23d6679a0f98f44158799963d8ddf6d2e5324e125fb03043d6206e53c3073e978460e89d24666f1eca3991c8153e269ed3c5b48c7697276dbe3e2969fa1339ad4cdeb712b3882e2082d50a18d551d2f5e4a4a437dee65654fe2903fd69da483831b0c862c53bfcb8af521631a773585cb119de3190b06ec0c41fec04f1dc1856666d9f14e8bc314e09a06b7c27dc149c16178e901c8dfd8797ca4ba8ce498105d9b020d3c893a28d76d4f2d317ff4da40d12e5451be3905355fb35ad69009290590cc061b445bd5b109507d27164d343af66b0ebb93a9c12efb8a9fc1c72096b1359369fb78a7efd9e99e616c4e2737f3baaf41823"}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x250}}, 0x24004010) r11 = inotify_init() ioctl$F2FS_IOC_SEC_TRIM_FILE(r11, 0x4018f514, &(0x7f0000003900)={0x8, 0x8, 0x1}) r12 = fanotify_init(0x8, 0x2001) fanotify_mark(r12, 0x0, 0x0, r3, &(0x7f0000003940)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000003980)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000039c0)={'\x00', 0x3, 0x4, 0x2c4, 0x8000000000000001, 0x8, 0xffffffffffffffff}) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000003a40)=0x0) kcmp$KCMP_EPOLL_TFD(r13, r14, 0x7, r6, &(0x7f0000003a80)={r9, r7, 0x10000}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r15, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x34, r16, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x80) program did not crash single: failed to extract reproducer bisect: bisecting 42 programs with base timeout 6m0s testing program (duration=6m10s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 14, 19, 3, 17, 30, 12, 17, 12, 23, 30, 14, 16, 29, 11, 29, 14, 6, 14, 29, 2, 30, 10, 4, 14, 14, 29, 28, 12, 29, 29, 28, 3, 5, 10, 10, 30, 14, 30, 5, 14, 25] detailed listing: executing program 32: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="d81ad798a040f7b66a334f82cdc5a22f6d780a3e0fbb1a12f26f42801bf1a15d26e4a8e4c224b81e000a326121a9bdf3cfd87cb3631322e9899993d106d9e32eb7fd36d4c9b43a7edad3bf7e3fedef25ab7897697bf463fbc51d", 0x5a}, {&(0x7f00000000c0)="42d5764ea36dcb41077e2a5e76c23d93677571b95eb0bac1bdbf6bf22bf95caf0b657bf0f9f915a1f256bf3fb268c5f8834bf3e1f42b6786a5785a1218609ba7d514d4b55ac65f44d9d75ffb87f8a24197c6b9dd661bb9794271dbb4f2025bed9f1fc88a9d782d9d33a8105dd70b7b1ff859192c19ac5bef76f57b2bf2876ab0eb962bbe01d5b9c0f8646398413e0a33b7a7ae", 0x93}, {&(0x7f0000000180)="4697b1a37db35db0e95dcfad2303a21c0cd373db546a20b040650268e42dbecbcb3254461a7f3473df68756af3b7f41ef42b8d310a7e780d564ba5fef1d406d5d3e014148a38493d81f7d7bea43de642032d145e856beb3b604067c2eec1981a41edb350697d6af878d25557c630216de575d7ea99f30e9a638142921d3954cbb0f2185e72f1d42cbe26db44612744526db7f3580a38aefe2cfe99d87ca12464a52f33dcf7a9ac2808d7d59dd7caddd15a771dcac19f8aee21a281ff54f9f4987cc2317bc557ca3aef9c6dfb1a740ca7299dad141870e6a89e27195c5554884fd7a13557b6863da3b59c8734e4", 0xed}], 0x3, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4d09}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xc0, [@broadcast, @loopback]}, @ssrr={0x89, 0xb, 0x52, [@remote, @remote]}, @rr={0x7, 0x2b, 0xd2, [@private=0xa010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x8, 0x6, [{0x6, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf8}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000400)="a3f8b580dadce1a4cb800506e2c88f79d8f92d5a69b2b7ca692a68f6c7fa484f62464c4edb1990de75f0826377f74df866c0da83405cd93b19", 0x39}, {&(0x7f0000000440)="12deb57824c769e65d1907436a4257aa8d954c4e4d9df1c9f8f59769ee029c38e87a15d99060a1436a65fabceb65ef0d710636df12151036cb007c7ee2873ba63f557106249d86abe4d9709f0d481f0882a8ec6b86af5b", 0x57}, {&(0x7f00000004c0)="294c5fb7015445e81bfa68036401c07b3691d25501cce55f6adcdf7e5fa419ddff4714", 0x23}, {&(0x7f0000000500)="9656a9fea7b5bdd188d663a71f18eeb4ffe5e13377016e28e96a60edecee72c970ceef59d565630fc7ffe8ef10ac553ba8683db95c2f8b0bd29a6854178cda5c521474bfd7b519a1ea356fa8baa42d2526880bf97ca725cadf6048cce02cc16cc8d189289419e7e0aad22f21c2e1fdbd4d8d2a6abd47bb2439740c9f78d871c5f69531a1c417b2f3e2b24dad68d82ea99b7306faca917f5c3f6751b5429741f182093671b2f3cc25a6ef9f4391f7d971d6c045f2abebd8be0d2b0584ab0c07700cc6ff2a788fd741b1905846b9d224", 0xcf}, {&(0x7f0000000600)="ca7ead4d3a34c0fc4a5747ac6f3865d7fc74bb5d509184cca966ef145488892a4e141605f66eea640600d909b2334c6aab20a83c73002411c6e541230a0864365f8d0b1127bb8d35e150d9887cce16cef363f1716f81f45ebe", 0x59}, {&(0x7f0000000680)="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", 0x1000}], 0x6}}, {{&(0x7f0000001700)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000001740)="50de8a6955eaafd8314d49bec941d4bbfe6258a5a6ca9860c043353c55ceb35ed5bab6633860ad89e188", 0x2a}, {&(0x7f0000001780)="33113ad13cee17c7a51971ad6486a76e49b3bbf8629d61ba4df5734f05ea142fb04a963ada24a685ac4111942d78a13bee8484c3c0e0009229732617249e82efb96c20d93e33f6f54dfb7bd05e214a02b92e99bc8321788404ab8dbbed192b82201ecd17ad0d9f93f21549d428ccc2b564a622d57cc9c60ac2445609c3e5bbb9c0b9f8ad7d4d5a99c7c3c27ecdeccd79502e564e71f218254bb6a98da65a51049cdc6db1e8bda0c7916aa76a0ddb27df6b4d824caa39a3e9c367a19d2ea9e9571c3c49a3c9eca873a6c299f7f3231c3a221f0a7fd85ba2e7b854e8373e6a9d27aa71660619b58b6163e73d1d569a", 0xee}, {&(0x7f0000001880)="451a3fc17f79de7247f80f65a58840c6bfd8696f2ce125cad48c8e524a638bb760ad16258856635f97e00e2036e2695123e03f", 0x33}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="03f2d4a45ffdf520c8c6d46a5108cbe4ef54754391c50d0702d86e43aa59728d92945923067dd609ae9b3b898e9d85b9112897f0361a8ef84a756dc8d2d6fc167c3c4ce4806c5626ded241ef4bbca2eb8b386559d70c0937b92884816f56a1a901007d738a0be7bc6f270618a6dc5e1f9f85b1942d91c174bcd934e1df6f56738aaf7f", 0x83}, {&(0x7f0000002980)="a51c4f8732d66705d9a2afb1c60de69eea8dd795cb853afc6f434ec234205ff538601d0bc9e6225fbf2731dd36b045f33bb1df73fac8a284a383b7dc799c40c698b1b2e30a35b15d5249c8e1512e6dfd8f300287c1fd41015391e901c129008781747a35c37df35c7f33d4c860ef11dcc35194cc3c98ff4b4966cdb8fa62caef036bad0d", 0x84}, {&(0x7f0000002a40)="0cca", 0x2}, {&(0x7f0000002a80)="20f67b227b4ddfddd87a3cca98c7ded32b1b7fbad1f33061c6bfe5e2d94f9ce778a5c66854d893d55d6c154c32d897dd54c7d7168021a741e7c09600c59f6f0d8f02be5a667b057024ea96163f6155fac8d1cae9437c21becb222a5a40f18cb39f68dd58834fe1aa894496d35433cd9cb20a3aa7601d43b2dbeb62ba", 0x7c}], 0x8, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1}}}], 0x20}}, {{&(0x7f0000002c00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002c40)="4b27323352747658c0120f519707fa1f585d4f64400673ca0a4a414794ed43e68b98ef565fe382414350244b20d0a861bc6bc96d3a9d7e23d2f34a1bc8570b105d9fcaa5646d7cde665ab0e8fbd9190cd6be7b1ce697e976083a5cd38bac5809b2a64d6fee7119d2c7e93ee8ddcfb17585b7d2944f463292c46841631234d5a8f5618e089712a7da815175e491f1c69d69cff2a5c01d9bef", 0x98}, {&(0x7f0000002d00)="ecab6b4d95b35554026230855f7ca7401083c89143b1eeffb37b2e42d9da75f261fb2fb5ca3d5a97d8f045558f01767c9ce7d285e5d7a6e5b36131eb1c3317e21c8c655b648d", 0x46}], 0x2, &(0x7f0000002dc0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1f, 0xa5, [@multicast2, @empty, @multicast2, @empty, @multicast2, @multicast1, @loopback]}, @generic={0x44, 0x5, "ebb6d8"}, @generic={0x7, 0x5, "2a65d0"}, @rr={0x7, 0x2b, 0x8d, [@remote, @local, @private=0xa010100, @remote, @rand_addr=0x64010100, @broadcast, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x80}}], 0x4, 0x44044) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002f40), 0x200, 0x0) r3 = creat(&(0x7f0000002f80)='./file0\x00', 0x4e) r4 = socket(0x1f, 0x0, 0x45) socket$rds(0x15, 0x5, 0x0) r5 = signalfd4(r0, &(0x7f0000002fc0)={[0x40]}, 0x8, 0x80000) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000003000)={@empty, @empty, r1}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)=@ipv6_getnexthop={0x34, 0x6a, 0x8, 0x70bd28, 0x1, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000c05) sendmsg$AUDIT_USER(r3, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x60, 0x3ed, 0x0, 0x70bd2c, 0x25dfdbfb, "2e1cafbb930da4977fb4aca6ae38fca4d389a28510d1fcf38a71c997193dcab0c9e8d95984cb8d528a93af656863f0e7777cd93a57d4db52770a4c0fad0d80f3bd408f162e7ff253ed9a29136a9549", ["", "", "", "", "", "", "", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003280), 0x2122c0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000032c0)={0x0, 0x9, 0x4, {0xd, @sliced={0x5, [0x1, 0x7, 0x1ff, 0x35, 0xc, 0xfb, 0xe, 0xf3, 0x8, 0x9, 0x9, 0x4, 0x0, 0x2, 0x6, 0x3, 0x8, 0x4b57, 0x8000, 0x40, 0x4, 0x6f, 0x401, 0x6, 0x0, 0x1, 0x247, 0x7, 0x7, 0xe, 0xc892, 0x1, 0x8, 0x3f1, 0x1ff, 0x8, 0x2, 0x400, 0x7b, 0x8, 0x7, 0x5, 0x0, 0xd9f, 0x550, 0xbda, 0x0, 0x9], 0x200}}, 0x8}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003480)={'gretap0\x00', &(0x7f00000033c0)={'erspan0\x00', r1, 0x8, 0x80, 0x2, 0x6, {{0x1e, 0x4, 0x3, 0x0, 0x78, 0x66, 0x0, 0x94, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xf, "3b18de6ab85858454f15c3c8a3"}, @noop, @timestamp={0x44, 0xc, 0x83, 0x0, 0x7, [0x9, 0x4]}, @ssrr={0x89, 0x7, 0xc0, [@multicast1]}, @timestamp={0x44, 0x8, 0x96, 0x0, 0xd, [0x8]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x12, "2afe471fba69cc3fbeb423007b61b3da"}, {0x1, 0xf, "3a2a1e13f96ba9a142b3171ea7"}, {0x8c80de97fcd48c00, 0xf, "7723952f3d2e8b7da5e76ff288"}]}, @noop]}}}}}) r9 = open_tree(r5, &(0x7f00000034c0)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000003500)={{0xa, 0x8}, {0x4c, 0x4}, 0x8, 0x1, 0x6}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000035c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000038c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003880)={&(0x7f0000003600)={0x250, r10, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "7d66ab23d6679a0f98f44158799963d8ddf6d2e5324e125fb03043d6206e53c3073e978460e89d24666f1eca3991c8153e269ed3c5b48c7697276dbe3e2969fa1339ad4cdeb712b3882e2082d50a18d551d2f5e4a4a437dee65654fe2903fd69da483831b0c862c53bfcb8af521631a773585cb119de3190b06ec0c41fec04f1dc1856666d9f14e8bc314e09a06b7c27dc149c16178e901c8dfd8797ca4ba8ce498105d9b020d3c893a28d76d4f2d317ff4da40d12e5451be3905355fb35ad69009290590cc061b445bd5b109507d27164d343af66b0ebb93a9c12efb8a9fc1c72096b1359369fb78a7efd9e99e616c4e2737f3baaf41823"}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x250}}, 0x24004010) r11 = inotify_init() ioctl$F2FS_IOC_SEC_TRIM_FILE(r11, 0x4018f514, &(0x7f0000003900)={0x8, 0x8, 0x1}) r12 = fanotify_init(0x8, 0x2001) fanotify_mark(r12, 0x0, 0x0, r3, &(0x7f0000003940)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000003980)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000039c0)={'\x00', 0x3, 0x4, 0x2c4, 0x8000000000000001, 0x8, 0xffffffffffffffff}) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000003a40)=0x0) kcmp$KCMP_EPOLL_TFD(r13, r14, 0x7, r6, &(0x7f0000003a80)={r9, r7, 0x10000}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r15, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x34, r16, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x80) executing program 5: pipe(&(0x7f0000000440)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r1, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="d9"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) executing program 5: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x208002) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580)="ba3a4765096270dd9b81e55fb27dc3256d26d1fb3dac0aba1cbba4434c36a5ea8c5d00758a438bb0b67a8099ad38bcd72274f8d7dbf145dd2b7dedb581b69cd72f9c523d", 0xc7, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010480000000000000000a00fffe0900010073797a31000000000400048008000b400000000404000740140000001400010000000000000000000200000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) executing program 5: syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020200"], 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) syz_usb_control_io(r1, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e26, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = memfd_create(0x0, 0x1) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0xf8f6936e946fa8ed, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00030200000002035b0f694dabda7db47fdf1880e598b044e442a8a3e5b45b153aa1f7a62f8089d9042fa856d2d1fe97d154b744dfd4b82f83a01ba399d52ef6cbb435dd8d2976236602efd4ade8edf5797aeb37c4447c4d0dc5"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="624161260066502faa7d9e8d947cce084c9ffa5e00e936ba132cff010000000000002f1ab922000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x0, 0x6, 0x1, &(0x7f00000000c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @remote}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x5af3, 0x6, 0x8, 0x16, 0x2, 0xe, 0x3, 0x331799a0, {0xd, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) write(r8, &(0x7f0000000000)="01", 0x1) executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000280)={0x0, "1f7f67361b5a90ee941e94a4031a82680d00902d0008424ad04b9634bef178be4ba64223a1d6f36d232b4ea6a469724e5a9c93a204ec2471559600"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x9, 0x4, 0x1}}, 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x100, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x5, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0x10000, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x6, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x8, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7c, 0x1, 0x3, 0xffffff38, 0x92, 0x1, 0x8001, 0xf, 0x63]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) executing program 33: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000280)={0x0, "1f7f67361b5a90ee941e94a4031a82680d00902d0008424ad04b9634bef178be4ba64223a1d6f36d232b4ea6a469724e5a9c93a204ec2471559600"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x9, 0x4, 0x1}}, 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x100, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x5, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0x10000, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x6, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x8, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7c, 0x1, 0x3, 0xffffff38, 0x92, 0x1, 0x8001, 0xf, 0x63]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x90ac0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x3}) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x1, 0xa, 0x8000000000007}) syz_clone3(&(0x7f0000000500)={0x20000000, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x4}, &(0x7f00000003c0)=""/104, 0x68, &(0x7f0000000440)=""/113, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x207a8ab9, 0x9, r4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) getdents(r2, &(0x7f0000000580)=""/146, 0x92) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff", @ANYRESHEX=r3, @ANYRES64], 0xc8) mprotect(&(0x7f0000479000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={@remote}}) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getxattr(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8033, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r4, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6cbf, 0x10001) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) sendmmsg$unix(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20, 0x10040000}}], 0x1, 0x44094) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x400000b0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100033062cbd7000fbdbdf25ffffffff00000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r5, 0x0, 0x0) executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x84, 0x489, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) executing program 34: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x84, 0x489, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6cbf, 0x10001) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x0, 0x9, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x67, 0x0, 0x66, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, {[@timestamp={0x44, 0x8, 0x54, 0x0, 0x0, [0x149c]}, @noop]}}}}}) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0xfe, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtaction={0x41c, 0x30, 0x800, 0x80000, 0x25dfdbfb, {}, [{0x260, 0x1, [@m_skbmod={0x25c, 0x8, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa236, 0xf72, 0x2, 0x1bc, 0x7}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x1, 0x6, 0xc05}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x10}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa7, 0x2006, 0x2, 0x0, 0x88}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xaf2, 0x8, 0x20000000, 0x800, 0x5f2}, 0xc}}]}, {0x16a, 0x6, "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"/358}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, {0x1a8, 0x1, [@m_skbmod={0xcc, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x0, 0x0, 0x8, 0x7}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x9, 0x1, 0x6, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x3e, 0x6, "65314c8b2089375ba6ab4f3de6cec03b96b0946397939335106a562c62bea0b400133f3cdecc3384358e80be4faeba1b7e134182b5ad0ef8390a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xd8, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0xac, 0x6, "36d35fb753d934d4c56cf7c3184282b1c9afef4b2d4080b0c2982f1746b9600eef4c74bc1da8ae17c5705a3cc9ab9dbc2d52485c404e20df5acd664fd8199955a5fc33de47a17d2d266e18d0a9f479454342163169fad3d3e800520e7bf8aa61b84f0607273768d247181e55f661ccb9f41816ca4d9a701cd8b167f0b87a08ba14f9bd58e26c1d6b1efd436656425f6294a5cd00f441139ea83a0dea3b010b2f1d29ff4dc780d3c9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4011}, 0x4040082) executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000940)={0x2c, &(0x7f0000000440)={0x40, 0xaaba9e6b12b0305a, 0x81, {0x81, 0x11, "0ddfe6ef34c60c3edb8e24a6cb4bcb3ebbb4fa9c942ce7ccdef591b1e1c8de48945d07a676a1cef4f4e5889b47620b1a3d3a6cde1a958c82f7023fb51aed73d4393ef48d55f526a12a38305909a40c34fe17f081d354de01a64adaf42665c562cb0a09e8765fa9c27bbe2ab041c674c913e1adc3141f4e7b2e421659202a51"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000880)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xf00, 0x2, [0xff3f28, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xd8, 0xff, 0xda8}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x1, 0x4, "13ff0a6d", "44d1b9bf"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x6, 0x9, 0x4, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000980)={0x0, 0x9, 0x13, "b5f43d3a191f774e10f8ed06bff2ec1dbc71bf"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xff81}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "24b3"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "867b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 2: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000200)={0x9, 0x80000001, 0xf, 0x401}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r6, 0x0, 0x0, 0x400001) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x6e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x6}}}}}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) fcntl$addseals(r6, 0x409, 0xc) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) executing program 0: unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x8, 0x5, 0x9, 0x8b, 0xc]}, &(0x7f0000000100)=0x54) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x2, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xb0, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xffff, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x5}}]}, 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064"], 0xfc}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x79b9, 0x0, 0x0, 0x0, 0x14}, [@jmp={0x5, 0x1, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) signalfd(r4, &(0x7f0000000280)={[0x27]}, 0x8) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(r4, 0x0, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x0, 0x6a, &(0x7f0000000680)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_getnexthop={0x2c, 0x6a, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r5, 0x0, 0x0, 0x4000, &(0x7f00000003c0)={0x11, 0x17, r7, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) executing program 2: unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setuid(0xee00) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) executing program 2: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc1ae72a578981ea50e4634ae70f", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf250e0000002c00028008000800060000010800040002000000080006003336000005000d000100000006000f0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6cbf, 0x10001) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) executing program 3: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000940)={0x2c, &(0x7f0000000440)={0x40, 0xaaba9e6b12b0305a, 0x81, {0x81, 0x11, "0ddfe6ef34c60c3edb8e24a6cb4bcb3ebbb4fa9c942ce7ccdef591b1e1c8de48945d07a676a1cef4f4e5889b47620b1a3d3a6cde1a958c82f7023fb51aed73d4393ef48d55f526a12a38305909a40c34fe17f081d354de01a64adaf42665c562cb0a09e8765fa9c27bbe2ab041c674c913e1adc3141f4e7b2e421659202a51"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000880)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xf00, 0x2, [0xff3f28, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xd8, 0xff, 0xda8}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x1, 0x4, "13ff0a6d", "44d1b9bf"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x6, 0x9, 0x4, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000980)={0x0, 0x9, 0x13, "b5f43d3a191f774e10f8ed06bff2ec1dbc71bf"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xff81}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "24b3"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "867b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) executing program 3: r0 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/route\x00') lseek(r3, 0x10001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000004c0)=0x100, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x1b7, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1a9, 0x66, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x195, 0x0, @opaque="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"}}}}}, 0x0) executing program 3: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000200)={0x9, 0x80000001, 0xf, 0x401}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r6, 0x0, 0x0, 0x400001) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x6e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x6}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) fcntl$addseals(r6, 0x409, 0xc) executing program 35: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) executing program 36: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0xfffffe9c) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b39a, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0xff, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x3, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd7000fbdbdf250c005680040066800400a680"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000240)={{0x9, 0x2}, 0x4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00efd826bea4de16573bec441b236264a05a3d0cd02c534e1356a99f9f5d0a2b215d2357c1d4d2463a16e236f89e8b8a2f01d568629650f5f4a2e3dd393a618846a53720a66dca8b6ab561382f020fd1bebe112ae4715f24e6a471f6265745cc0a959f0c069fcb68a5aee2278b5d33670a6d323413a97841b5655ba7ba83570907d85bd16e13b8a428e77ce1"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30000000000500"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 4: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="03030800030016000c00452d001400650000091190780a010101ac1414aac7050804000000001bc9f8d901001504"], 0x2e) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) wait4(r0, 0x0, 0x2, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x22000, 0x52) executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="000302000b00000000f52d39483075001209ffb74cb3ee", 0x17}], 0x1}, 0x40011) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0xc, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_setup(0x7, &(0x7f00000008c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x1, 0x40, 0x9, 0xfffffe0000000001, 0x7f, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f00002ba000/0x3000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000200)={r10}) socket$igmp(0x2, 0x3, 0x2) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program crashed: INFO: rcu detected stall in corrupted bisect: bisecting 42 programs bisect: split chunks (needed=false): <42> bisect: split chunk #0 of len 42 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 29, 14, 6, 14, 29, 2, 30, 10, 4, 14, 14, 29, 28, 12, 29, 29, 28, 3, 5, 10, 10, 30, 14, 30, 5, 14, 25] detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) executing program 34: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x84, 0x489, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6cbf, 0x10001) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x0, 0x9, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x67, 0x0, 0x66, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, {[@timestamp={0x44, 0x8, 0x54, 0x0, 0x0, [0x149c]}, @noop]}}}}}) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0xfe, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtaction={0x41c, 0x30, 0x800, 0x80000, 0x25dfdbfb, {}, [{0x260, 0x1, [@m_skbmod={0x25c, 0x8, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa236, 0xf72, 0x2, 0x1bc, 0x7}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x1, 0x6, 0xc05}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x10}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa7, 0x2006, 0x2, 0x0, 0x88}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xaf2, 0x8, 0x20000000, 0x800, 0x5f2}, 0xc}}]}, {0x16a, 0x6, "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"/358}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, {0x1a8, 0x1, [@m_skbmod={0xcc, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x0, 0x0, 0x8, 0x7}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x9, 0x1, 0x6, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x3e, 0x6, "65314c8b2089375ba6ab4f3de6cec03b96b0946397939335106a562c62bea0b400133f3cdecc3384358e80be4faeba1b7e134182b5ad0ef8390a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xd8, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0xac, 0x6, "36d35fb753d934d4c56cf7c3184282b1c9afef4b2d4080b0c2982f1746b9600eef4c74bc1da8ae17c5705a3cc9ab9dbc2d52485c404e20df5acd664fd8199955a5fc33de47a17d2d266e18d0a9f479454342163169fad3d3e800520e7bf8aa61b84f0607273768d247181e55f661ccb9f41816ca4d9a701cd8b167f0b87a08ba14f9bd58e26c1d6b1efd436656425f6294a5cd00f441139ea83a0dea3b010b2f1d29ff4dc780d3c9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4011}, 0x4040082) executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000940)={0x2c, &(0x7f0000000440)={0x40, 0xaaba9e6b12b0305a, 0x81, {0x81, 0x11, "0ddfe6ef34c60c3edb8e24a6cb4bcb3ebbb4fa9c942ce7ccdef591b1e1c8de48945d07a676a1cef4f4e5889b47620b1a3d3a6cde1a958c82f7023fb51aed73d4393ef48d55f526a12a38305909a40c34fe17f081d354de01a64adaf42665c562cb0a09e8765fa9c27bbe2ab041c674c913e1adc3141f4e7b2e421659202a51"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000880)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xf00, 0x2, [0xff3f28, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xd8, 0xff, 0xda8}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x1, 0x4, "13ff0a6d", "44d1b9bf"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x6, 0x9, 0x4, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000980)={0x0, 0x9, 0x13, "b5f43d3a191f774e10f8ed06bff2ec1dbc71bf"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xff81}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "24b3"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "867b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 2: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000200)={0x9, 0x80000001, 0xf, 0x401}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r6, 0x0, 0x0, 0x400001) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x6e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x6}}}}}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) fcntl$addseals(r6, 0x409, 0xc) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) executing program 0: unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x8, 0x5, 0x9, 0x8b, 0xc]}, &(0x7f0000000100)=0x54) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x2, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xb0, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xffff, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x5}}]}, 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064"], 0xfc}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x79b9, 0x0, 0x0, 0x0, 0x14}, [@jmp={0x5, 0x1, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) signalfd(r4, &(0x7f0000000280)={[0x27]}, 0x8) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(r4, 0x0, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x0, 0x6a, &(0x7f0000000680)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_getnexthop={0x2c, 0x6a, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r5, 0x0, 0x0, 0x4000, &(0x7f00000003c0)={0x11, 0x17, r7, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) executing program 2: unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setuid(0xee00) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) executing program 2: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc1ae72a578981ea50e4634ae70f", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf250e0000002c00028008000800060000010800040002000000080006003336000005000d000100000006000f0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6cbf, 0x10001) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) executing program 3: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000940)={0x2c, &(0x7f0000000440)={0x40, 0xaaba9e6b12b0305a, 0x81, {0x81, 0x11, "0ddfe6ef34c60c3edb8e24a6cb4bcb3ebbb4fa9c942ce7ccdef591b1e1c8de48945d07a676a1cef4f4e5889b47620b1a3d3a6cde1a958c82f7023fb51aed73d4393ef48d55f526a12a38305909a40c34fe17f081d354de01a64adaf42665c562cb0a09e8765fa9c27bbe2ab041c674c913e1adc3141f4e7b2e421659202a51"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000880)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xf00, 0x2, [0xff3f28, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xd8, 0xff, 0xda8}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x1, 0x4, "13ff0a6d", "44d1b9bf"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x3, 0x6, 0x9, 0x4, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000980)={0x0, 0x9, 0x13, "b5f43d3a191f774e10f8ed06bff2ec1dbc71bf"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xff81}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "24b3"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "867b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) executing program 3: r0 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/route\x00') lseek(r3, 0x10001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000004c0)=0x100, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x1b7, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1a9, 0x66, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x195, 0x0, @opaque="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"}}}}}, 0x0) executing program 3: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000200)={0x9, 0x80000001, 0xf, 0x401}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r6, 0x0, 0x0, 0x400001) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x6e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x6}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) fcntl$addseals(r6, 0x409, 0xc) executing program 35: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) executing program 36: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0xfffffe9c) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b39a, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0xff, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x3, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd7000fbdbdf250c005680040066800400a680"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000240)={{0x9, 0x2}, 0x4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00efd826bea4de16573bec441b236264a05a3d0cd02c534e1356a99f9f5d0a2b215d2357c1d4d2463a16e236f89e8b8a2f01d568629650f5f4a2e3dd393a618846a53720a66dca8b6ab561382f020fd1bebe112ae4715f24e6a471f6265745cc0a959f0c069fcb68a5aee2278b5d33670a6d323413a97841b5655ba7ba83570907d85bd16e13b8a428e77ce1"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30000000000500"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 4: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="03030800030016000c00452d001400650000091190780a010101ac1414aac7050804000000001bc9f8d901001504"], 0x2e) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) wait4(r0, 0x0, 0x2, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x22000, 0x52) executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="000302000b00000000f52d39483075001209ffb74cb3ee", 0x17}], 0x1}, 0x40011) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0xc, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_setup(0x7, &(0x7f00000008c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x1, 0x40, 0x9, 0xfffffe0000000001, 0x7f, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f00002ba000/0x3000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000200)={r10}) socket$igmp(0x2, 0x3, 0x2) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program crashed: INFO: rcu detected stall in sys_readlink bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 29, 29, 28, 3, 5, 10, 10, 30, 14, 30, 5, 14, 25] detailed listing: executing program 3: r0 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/route\x00') lseek(r3, 0x10001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000004c0)=0x100, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x1b7, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1a9, 0x66, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x195, 0x0, @opaque="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"}}}}}, 0x0) executing program 3: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000200)={0x9, 0x80000001, 0xf, 0x401}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, 0x0, 0x4000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r6, 0x0, 0x0, 0x400001) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x6e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x6}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) fcntl$addseals(r6, 0x409, 0xc) executing program 35: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_int(r7, &(0x7f0000007880)=0x7fffffff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) executing program 36: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4081) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0xfffffe9c) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b39a, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0xff, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x3, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd7000fbdbdf250c005680040066800400a680"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000240)={{0x9, 0x2}, 0x4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00efd826bea4de16573bec441b236264a05a3d0cd02c534e1356a99f9f5d0a2b215d2357c1d4d2463a16e236f89e8b8a2f01d568629650f5f4a2e3dd393a618846a53720a66dca8b6ab561382f020fd1bebe112ae4715f24e6a471f6265745cc0a959f0c069fcb68a5aee2278b5d33670a6d323413a97841b5655ba7ba83570907d85bd16e13b8a428e77ce1"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30000000000500"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 4: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="03030800030016000c00452d001400650000091190780a010101ac1414aac7050804000000001bc9f8d901001504"], 0x2e) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) wait4(r0, 0x0, 0x2, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x22000, 0x52) executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="000302000b00000000f52d39483075001209ffb74cb3ee", 0x17}], 0x1}, 0x40011) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0xc, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_setup(0x7, &(0x7f00000008c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x1, 0x40, 0x9, 0xfffffe0000000001, 0x7f, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f00002ba000/0x3000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000200)={r10}) socket$igmp(0x2, 0x3, 0x2) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program crashed: INFO: rcu detected stall in corrupted bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <14> bisect: split chunk #0 of len 14 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30, 14, 30, 5, 14, 25] detailed listing: executing program 37: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b39a, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0xff, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x3, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd7000fbdbdf250c005680040066800400a680"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000240)={{0x9, 0x2}, 0x4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00efd826bea4de16573bec441b236264a05a3d0cd02c534e1356a99f9f5d0a2b215d2357c1d4d2463a16e236f89e8b8a2f01d568629650f5f4a2e3dd393a618846a53720a66dca8b6ab561382f020fd1bebe112ae4715f24e6a471f6265745cc0a959f0c069fcb68a5aee2278b5d33670a6d323413a97841b5655ba7ba83570907d85bd16e13b8a428e77ce1"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30000000000500"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) executing program 4: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="03030800030016000c00452d001400650000091190780a010101ac1414aac7050804000000001bc9f8d901001504"], 0x2e) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) wait4(r0, 0x0, 0x2, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x22000, 0x52) executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="000302000b00000000f52d39483075001209ffb74cb3ee", 0x17}], 0x1}, 0x40011) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0xc, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_setup(0x7, &(0x7f00000008c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x1, 0x40, 0x9, 0xfffffe0000000001, 0x7f, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f00002ba000/0x3000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000200)={r10}) socket$igmp(0x2, 0x3, 0x2) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program crashed: INFO: task hung in inet_rtm_newaddr bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 25] detailed listing: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac3-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ADDFB2-openat$sndseq-ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO-openat$sndseq-read-ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL-openat$sndseq-socket$nl_generic-syz_usb_connect$hid-socket$netlink-syz_usb_control_io$hid-syz_usb_control_io-socket$inet6_sctp-close-socket$inet6_sctp-ioctl$KVM_GET_STATS_FD_vm-setsockopt-socket$unix-bind$unix-sendmsg$nl_generic-ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL detailed listing: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x81, 0xc3}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffffe0d, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000001000c000180087eb98ff4000000000000000000000000000077822bea84a80a212e629eabfa2f307b50fb16488de02e442271a22413940bdc0c62ec5d7556f7538319dbf505e72098d21e2163d1f29cf8518856cffc60a597d7b222694714894a878e78cc0c294cc8e0a7fb41b3d87e8ab3229ad5c81aa4dd16f1a1a6a607385570e2ce91fe39d77c711fa44a73fa47655b458b", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff5, 0x6, 0xa33, 0x4, 0x3}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14] detailed listing: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x800, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) program crashed: INFO: task hung in linkwatch_event bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route-clock_adjtime-sendmsg$nl_route-read-syz_genetlink_get_family_id$wireguard detailed listing: executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 4: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route-clock_adjtime-sendmsg$nl_route-read-syz_genetlink_get_family_id$wireguard detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) program crashed: INFO: task hung in netdev_work_proc bisect: concatenation succeeded found reproducer with 14 syscalls minimizing guilty program testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route-clock_adjtime-sendmsg$nl_route-read detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) read(r3, &(0x7f00000004c0)=""/4093, 0xffd) program crashed: INFO: task hung in switchdev_deferred_process_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route-clock_adjtime-sendmsg$nl_route detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00200026bd7000fcdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="8918bf97a8565d025d906358c956459855ea694bdb24b80449d261fe19c79b0e2444a50e37ac8e4e7f42b2cbb4ea15437cad3e47c458125f02c32395635cfa373fca702993a33e997322361d8feb5cb21fd529fa962f84f7"], 0x20}}, 0x20044040) program crashed: no output from test machine testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route-clock_adjtime detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) program crashed: INFO: task hung in cfg80211_event_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$nl_route detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) socket$nl_route(0x10, 0x3, 0x0) program crashed: no output from test machine testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in cfg80211_event_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-socketpair$unix detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) program did not crash testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-mmap$IORING_OFF_SQ_RING-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program did not crash testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-unshare-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) unshare(0x22020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in inet6_rtm_newaddr testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0x80}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in inet_rtm_newaddr testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in dev_ioctl testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-shutdown-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in del_device_store testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$inet6_sctp-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in switchdev_deferred_process_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program did not crash testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', 0x0}) program did not crash testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) program did not crash extracting C reproducer testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL VM was preempted during C execution: failed to run command in VM: instance is preempted, retrying testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: INFO: task hung in switchdev_deferred_process_work simplifying C reproducer testing compiled C program (duration=7m4.248052184s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: INFO: task hung in regdb_fw_cb a never seen crash title: INFO: task hung in regdb_fw_cb, ignore testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: INFO: task hung in addrconf_dad_work testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: INFO: task hung in addrconf_dad_work testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL VM was preempted during C execution: failed to run command in VM: instance is preempted, retrying testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine testing compiled C program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in addrconf_dad_work validation run: crashed=true testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in addrconf_dad_work validation run: crashed=true testing program (duration=7m4.248052184s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}}) program crashed: INFO: task hung in reg_process_self_managed_hints validation run: crashed=true reproducing took 5h8m29.123967746s repro crashed as (corrupted=false): INFO: task kworker/1:0:25 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:25920 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events reg_todo Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 class_wiphy_constructor include/net/cfg80211.h:6906 [inline] reg_process_self_managed_hints+0x8d/0x160 net/wireless/reg.c:3229 reg_todo+0x8df/0xa40 net/wireless/reg.c:3242 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/u8:3:44 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:23776 pid:44 tgid:44 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 rtnl_net_lock include/linux/rtnetlink.h:134 [inline] addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/1:2:980 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:25344 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient crda_timeout_work Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/0:1/10: 4, on CPU#0: #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888032aed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888028947028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/u8:1/13: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888033020800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888033020800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:0/25: 4, on CPU#1: #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 net/wireless/reg.c:3239 #3: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #3: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 net/wireless/reg.c:3229 locks held by khungtaskd/32: 1, last CPU#0: #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:3/44: 3, on CPU#0: #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 locks held by kworker/u8:4/59: 2, last CPU#0: #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by kworker/u8:9/170: 3, last CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:2/980: 3, on CPU#1: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 locks held by klogd/4973: 1, last CPU#1: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by udevd/4984: 1, last CPU#0: #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:305 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 security/tomoyo/file.c:826 locks held by dhcpcd/5279: 1, last CPU#0: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by getty/5373: 2, on CPU#0: #0: ffff888035fd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz-executor/5754: 1, on CPU#1: #0: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline] #0: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587 locks held by kworker/1:5/5860: 3, last CPU#1: #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880326734b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822 locks held by kworker/1:7/5866: 4, last CPU#1: #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888032aed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff888028947028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by kworker/0:6/5868: 2, last CPU#0: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by dhcpcd/5877: 2, last CPU#0: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by udevd/5878: 2, last CPU#1: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by syz-executor/5879: 1, last CPU#0: #0: ffff888012534378 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff888012534378 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x163/0x3e0 mm/vma.c:3397 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:get_stack_info_noinstr+0x0/0x130 arch/x86/kernel/dumpstack_64.c:172 Code: c7 00 16 06 8c e8 30 55 00 00 65 c6 05 06 a2 af 07 00 eb 9a cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 41 57 41 56 41 54 53 48 89 d3 49 89 f7 49 89 fe e8 27 RSP: 0018:ffffc90000006c18 EFLAGS: 00000286 RAX: 1ffff92000000d9c RBX: ffffc90000006cc8 RCX: ffffc90000006cc8 RDX: ffffc90000006ca8 RSI: ffff88801e2a0000 RDI: ffffc90000006c50 RBP: ffffc90000006cd0 R08: ffffc90000006d07 R09: 0000000000000000 R10: ffffc90000006ca8 R11: fffff52000000da1 R12: ffffc90000006c50 R13: dffffc0000000000 R14: ffffc90000006ca8 R15: ffff88801e2a0000 FS: 0000000000000000(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0d35edeff8 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: get_stack_info+0x3a/0xf0 arch/x86/kernel/dumpstack_64.c:199 __unwind_start+0x3c5/0x660 arch/x86/kernel/unwind_orc.c:756 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x2b9/0x600 mm/slub.c:5010 skb_ext_maybe_cow net/core/skbuff.c:7167 [inline] skb_ext_add+0x1b6/0x8e0 net/core/skbuff.c:7242 nf_bridge_unshare net/bridge/br_netfilter_hooks.c:170 [inline] br_nf_forward_ip+0xc3/0xa30 net/bridge/br_netfilter_hooks.c:686 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x23e/0x3f0 include/linux/netfilter.h:323 __br_forward+0x397/0x540 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] maybe_deliver net/bridge/br_forward.c:191 [inline] br_flood+0x3e3/0x8d0 net/bridge/br_forward.c:245 br_handle_frame_finish+0x1119/0x1950 net/bridge/br_input.c:229 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:325 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1329/0x1600 net/bridge/br_input.c:451 __netif_receive_skb_core+0x989/0x30c0 net/core/dev.c:6151 __netif_receive_skb_one_core net/core/dev.c:6262 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] process_backlog+0x727/0x18b0 net/core/dev.c:6728 __napi_poll+0xaa/0x330 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8007 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:221 Code: f7 e8 4d 41 bb f5 f7 c3 00 02 00 00 74 05 e8 f0 8b e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 4e ac f5 65 48 8b 05 ec b0 ac 07 48 85 c0 74 18 5b 41 5e c3 RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e414ba9 RDI: 0000000000000001 RBP: ffffc90000157e18 R08: ffffffff907a517f R09: 1ffffffff20f4a2f R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 0000000000000002 R13: ffff88801e2a0000 R14: ffffffff9ad40240 R15: dffffc0000000000 nbcon_emit_one kernel/printk/nbcon.c:1165 [inline] nbcon_kthread_func+0x6c4/0x880 kernel/printk/nbcon.c:1271 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task kworker/1:0:25 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:25920 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events reg_todo Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 class_wiphy_constructor include/net/cfg80211.h:6906 [inline] reg_process_self_managed_hints+0x8d/0x160 net/wireless/reg.c:3229 reg_todo+0x8df/0xa40 net/wireless/reg.c:3242 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/u8:3:44 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:23776 pid:44 tgid:44 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 rtnl_net_lock include/linux/rtnetlink.h:134 [inline] addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/1:2:980 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:25344 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient crda_timeout_work Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/0:1/10: 4, on CPU#0: #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888032aed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888028947028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/u8:1/13: 3, last CPU#0: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888033020800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888033020800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:0/25: 4, on CPU#1: #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 net/wireless/reg.c:3239 #3: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #3: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 net/wireless/reg.c:3229 locks held by khungtaskd/32: 1, last CPU#0: #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:3/44: 3, on CPU#0: #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880315d8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90000b47c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230 locks held by kworker/u8:4/59: 2, last CPU#0: #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff8880328b2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by kworker/u8:9/170: 3, last CPU#1: #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90002f1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff888033540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/1:2/980: 3, on CPU#1: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000508fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 net/wireless/reg.c:529 locks held by klogd/4973: 1, last CPU#1: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by udevd/4984: 1, last CPU#0: #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:305 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 security/tomoyo/file.c:826 locks held by dhcpcd/5279: 1, last CPU#0: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 locks held by getty/5373: 2, on CPU#0: #0: ffff888035fd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz-executor/5754: 1, on CPU#1: #0: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline] #0: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587 locks held by kworker/1:5/5860: 3, last CPU#1: #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888026033940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000348fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880326734b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822 locks held by kworker/1:7/5866: 4, last CPU#1: #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff888079922140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000314fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff888032aed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff888028947028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by kworker/0:6/5868: 2, last CPU#0: #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000313fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by dhcpcd/5877: 2, last CPU#0: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by udevd/5878: 2, last CPU#1: #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305 #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by syz-executor/5879: 1, last CPU#0: #0: ffff888012534378 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #0: ffff888012534378 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x163/0x3e0 mm/vma.c:3397 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:get_stack_info_noinstr+0x0/0x130 arch/x86/kernel/dumpstack_64.c:172 Code: c7 00 16 06 8c e8 30 55 00 00 65 c6 05 06 a2 af 07 00 eb 9a cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 41 57 41 56 41 54 53 48 89 d3 49 89 f7 49 89 fe e8 27 RSP: 0018:ffffc90000006c18 EFLAGS: 00000286 RAX: 1ffff92000000d9c RBX: ffffc90000006cc8 RCX: ffffc90000006cc8 RDX: ffffc90000006ca8 RSI: ffff88801e2a0000 RDI: ffffc90000006c50 RBP: ffffc90000006cd0 R08: ffffc90000006d07 R09: 0000000000000000 R10: ffffc90000006ca8 R11: fffff52000000da1 R12: ffffc90000006c50 R13: dffffc0000000000 R14: ffffc90000006ca8 R15: ffff88801e2a0000 FS: 0000000000000000(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0d35edeff8 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: get_stack_info+0x3a/0xf0 arch/x86/kernel/dumpstack_64.c:199 __unwind_start+0x3c5/0x660 arch/x86/kernel/unwind_orc.c:756 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x2b9/0x600 mm/slub.c:5010 skb_ext_maybe_cow net/core/skbuff.c:7167 [inline] skb_ext_add+0x1b6/0x8e0 net/core/skbuff.c:7242 nf_bridge_unshare net/bridge/br_netfilter_hooks.c:170 [inline] br_nf_forward_ip+0xc3/0xa30 net/bridge/br_netfilter_hooks.c:686 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x23e/0x3f0 include/linux/netfilter.h:323 __br_forward+0x397/0x540 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] maybe_deliver net/bridge/br_forward.c:191 [inline] br_flood+0x3e3/0x8d0 net/bridge/br_forward.c:245 br_handle_frame_finish+0x1119/0x1950 net/bridge/br_input.c:229 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:325 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1329/0x1600 net/bridge/br_input.c:451 __netif_receive_skb_core+0x989/0x30c0 net/core/dev.c:6151 __netif_receive_skb_one_core net/core/dev.c:6262 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] process_backlog+0x727/0x18b0 net/core/dev.c:6728 __napi_poll+0xaa/0x330 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8007 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:221 Code: f7 e8 4d 41 bb f5 f7 c3 00 02 00 00 74 05 e8 f0 8b e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 4e ac f5 65 48 8b 05 ec b0 ac 07 48 85 c0 74 18 5b 41 5e c3 RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e414ba9 RDI: 0000000000000001 RBP: ffffc90000157e18 R08: ffffffff907a517f R09: 1ffffffff20f4a2f R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 0000000000000002 R13: ffff88801e2a0000 R14: ffffffff9ad40240 R15: dffffc0000000000 nbcon_emit_one kernel/printk/nbcon.c:1165 [inline] nbcon_kthread_func+0x6c4/0x880 kernel/printk/nbcon.c:1271 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245