Extracting prog: 4m36.095469779s Minimizing prog: 25m29.029394029s Simplifying prog options: 0s Extracting C: 25.944046458s Simplifying C: 9m28.746704836s extracting reproducer from 60 programs testing a last program of every proc single: executing 15 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): inotify_init-socket-close_range-msgget-openat$ttynull-msgsnd-ioctl$TIOCSTI-msgctl$MSG_STAT_ANY detailed listing: executing program 0: r0 = inotify_init() socket(0x22, 0x80a, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x200) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x2b, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/31) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): inotify_init-socket-close_range-msgget-openat$ttynull-msgsnd-ioctl$TIOCSTI-msgctl$MSG_STAT_ANY detailed listing: executing program 0: r0 = inotify_init() socket(0x22, 0x80a, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x200) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x2b, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/31) program did not crash program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_disconnect-socket$inet6_tcp-bind$inet6-listen-setsockopt$SO_BINDTODEVICE-syz_emit_ethernet-syz_emit_ethernet-syz_usb_connect$midi detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_disconnect(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80010040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x80000001}]}}}}}}}, 0x0) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x944, 0x204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf7, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5}}}}}]}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$char_usb-syz_usb_control_io$rtl8150-openat$nullb-getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS-mmap-madvise-ioctl$LOOP_SET_STATUS64-openat$tcp_mem-io_uring_register$IORING_REGISTER_QUERY-openat$nullb-socket$packet-sendto$packet-sendmsg$ETHTOOL_MSG_EEE_GET-openat$nullb-syz_open_dev$loop-ioctl$BLKREPORTZONE-ioctl$LOOP_CONFIGURE-io_submit-openat-mkdirat-mount-openat-write-ioctl$BLKZEROOUT-getsockopt$inet_tcp_int detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003040439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0905090340007a0a84"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x439}}, {0x94, &(0x7f0000000880)=@string={0x94, 0x3, "f078e0136f5f36817cf6390875ccff15100a8f171dd95c4949b32caebd1c4856852d074ecbb04db3484f5743e20aab059271178d8e215f39a775d113ddabca9b0a1a881d7131d393c35a7c197fbf9bfdad4cefc08aa8316d87c4e1b0a28a2c4f258f51be6302804dfcd014658bd8fe379481c6b76084bbf26a2a58b239bbf9d4b6d4656df7104d5d6015669c29e8df490e71"}}, {0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="2903d8fbcc797a1acb107cc63fa7118679e8f722b2bd5df1ec20ce0a9e00a334c2f35b5ce25b9c6a3de755154fa8f05ad159b1ba6cee963f8d14ad8dfcf1e00715abe9a4cb95e06629eecf019dc6b10ebe6689921b262a"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100009a8bcbd13f4a28dd27569a714370b63bc7f46f96d36ea8f974a9c9788232ef0dd7f1a92d0cd7284d0cc582eca5b57370"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000c042000001898ebb6"], 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa4242, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @private=0xa010103}}, 0x1}, &(0x7f0000000300)=0x90) mmap(&(0x7f000023f000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xe, 0x2, 0x0, 0x12, 0x6, 0x1, "a511a816bf60e8190d531c0ada6528af5bae697a77f5b41937d090babbf1d2469db21f2358d55bd5f7040157d45c6dd23ffbe02f17ce3299f2a18a190d104524", "eef1ab228e0830ba54d5d9d94d384e8c100b09776574c31bfb0c59f0c3f763cfc86e9d3fcd005f81a86182fa00524765983911c2dc1acf929d15875d8551182b", "f332d0d67eb23a177b46765ef23b988eabe9bd047b0d70ad38af1a24b66f6c11", [0x80, 0x4]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000e40)={0xb0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000006c0)={0x0, 0x3, 0x0, [{0x6f, 0xc2c, 0xe7e, 0x8, 0xd, 0xfb, 0x7, '\x00', 0xf}, {0x0, 0xfff, 0x7fffffffffffffff, 0x7, 0x7, 0x8, 0xf8, '\x00', 0x8}, {0x7, 0x40, 0x1000, 0xba, 0xa9, 0x7, 0x7, '\x00', 0x7}]}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xde9, 0x7, 0x0, 0x0, 0x19, 0x9, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afab22d0000b420a1a93c5240f45f819e01177d3d458d08000000ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x7]}}) io_submit(0x0, 0x3, &(0x7f0000000e00)=[&(0x7f0000000c80)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000c00)="1fef4b1d2c011aab0ecb21a659de10815e624f01af49b45e2f5881459f3f77c0332c6c4056ffcbad982e4cb444df104c50b7f3063e5e7a32d0bcb16140ff19060cc1f5dd734811800a3d84ce008fbfa3ab6630a5fa86dd906c500724aa22827aac240395e27db86512e19de28f70297236e8f2764188", 0x76, 0xff, 0x0, 0x3}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x82e, r4, &(0x7f0000000cc0)="d76b02f6df24da8317bf551e13339f04d247bc3b457034f4a34a788b9162a22d890befbf75f229560179369849f17879ef7ae753c0b644ad30edc98cdd8f397e391894d339412dce34007e08edeac2d4dd68", 0x52, 0x50a, 0x0, 0x2}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x401, r2, &(0x7f0000000d80)="3c85f519bdbcd7aec06a5a19a47a3614acff3ddde7f31afb4049d32743a446d2", 0x20, 0x7, 0x0, 0x1}]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x0 _rg2=\\-', 0x21) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x20000}) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-syz_usb_connect-openat$tun-ioctl$TUNSETIFF-socket$inet_udp-socket$nl_route-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_inet_SIOCSIFFLAGS-write$tun-mkdirat-mount-openat-write-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-ioctl$UI_SET_KEYBIT detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='z', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x205) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: KASAN: slab-use-after-free Read in flow_block_cb_setup_simple single: successfully extracted reproducer found reproducer with 26 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: KASAN: slab-use-after-free Read in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-ioctl$USBDEVFS_SETINTERFACE-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-socket$nl_route-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-copy_file_range-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-syz_open_dev$sndpcmc-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x10800) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, r4, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-syz_open_dev$usbfs-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-socket$nl_route-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) copy_file_range(0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000000038000a40000000030a03000000000000000000050000000900010073797a300000000008000540fffffffc18000480140003007465616d5f736c6176655f3100000000140000001100010000000000800000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, 0x0, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$nl_route-copy_file_range-ioctl$USBDEVFS_SETINTERFACE-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000001c0)={0x0, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true reproducing took 42m46.999417818s repro crashed as (corrupted=false): non-slab/vmalloc memory list_del corruption. prev->next should be ffff88802902db00, but was ffffffff9023d780. (prev=ffffffff9023d780) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:62! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 6861 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 lib/list_debug.c:62 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 3e 62 8c e8 37 de ec fb 90 <0f> 0b 4c 89 e7 e8 ec ff 24 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000662ef88 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff88802902db00 RCX: 0000000000000000 RDX: 000000000000006d RSI: ffffffff81ea37b9 RDI: fffff52000cc5de2 RBP: ffffffff9023d780 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000000 R11: 0000000000000001 R12: ffffffff9023d780 R13: 0000000000000001 R14: ffffc9000662f060 R15: ffffc9000662f060 FS: 000055556ed07500(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000600 CR3: 000000003efe7000 CR4: 0000000000352ef0 Call Trace: __list_del_entry_valid include/linux/list.h:140 [inline] __list_del_entry include/linux/list.h:261 [inline] list_del include/linux/list.h:275 [inline] flow_block_cb_setup_simple+0x36e/0xa20 net/core/flow_offload.c:367 nsim_setup_tc+0x1af/0x200 drivers/net/netdevsim/tc.c:87 nft_block_offload_cmd+0x144/0x2f0 net/netfilter/nf_tables_offload.c:397 nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline] nft_flow_block_chain+0x175/0x4b0 net/netfilter/nf_tables_offload.c:471 nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline] nft_flow_rule_offload_commit+0x181/0x6a0 net/netfilter/nf_tables_offload.c:592 nf_tables_commit+0xd7b/0x9300 net/netfilter/nf_tables_api.c:11006 nfnetlink_rcv_batch+0x1a4d/0x2880 net/netfilter/nfnetlink.c:574 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline] nfnetlink_rcv+0x3bd/0x440 net/netfilter/nfnetlink.c:665 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767 __sys_sendmsg+0x160/0x210 net/socket.c:2799 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc955d9e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd9070fe58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fc956025fa0 RCX: 00007fc955d9e159 RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 RBP: 00007fc955e3506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc956025fac R14: 00007fc956025fa0 R15: 00007fc956025fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 lib/list_debug.c:62 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 3e 62 8c e8 37 de ec fb 90 <0f> 0b 4c 89 e7 e8 ec ff 24 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000662ef88 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff88802902db00 RCX: 0000000000000000 RDX: 000000000000006d RSI: ffffffff81ea37b9 RDI: fffff52000cc5de2 RBP: ffffffff9023d780 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000000 R11: 0000000000000001 R12: ffffffff9023d780 R13: 0000000000000001 R14: ffffc9000662f060 R15: ffffc9000662f060 FS: 000055556ed07500(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000600 CR3: 000000003efe7000 CR4: 0000000000352ef0 final repro crashed as (corrupted=false): non-slab/vmalloc memory list_del corruption. prev->next should be ffff88802902db00, but was ffffffff9023d780. (prev=ffffffff9023d780) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:62! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 6861 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 lib/list_debug.c:62 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 3e 62 8c e8 37 de ec fb 90 <0f> 0b 4c 89 e7 e8 ec ff 24 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000662ef88 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff88802902db00 RCX: 0000000000000000 RDX: 000000000000006d RSI: ffffffff81ea37b9 RDI: fffff52000cc5de2 RBP: ffffffff9023d780 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000000 R11: 0000000000000001 R12: ffffffff9023d780 R13: 0000000000000001 R14: ffffc9000662f060 R15: ffffc9000662f060 FS: 000055556ed07500(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000600 CR3: 000000003efe7000 CR4: 0000000000352ef0 Call Trace: __list_del_entry_valid include/linux/list.h:140 [inline] __list_del_entry include/linux/list.h:261 [inline] list_del include/linux/list.h:275 [inline] flow_block_cb_setup_simple+0x36e/0xa20 net/core/flow_offload.c:367 nsim_setup_tc+0x1af/0x200 drivers/net/netdevsim/tc.c:87 nft_block_offload_cmd+0x144/0x2f0 net/netfilter/nf_tables_offload.c:397 nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline] nft_flow_block_chain+0x175/0x4b0 net/netfilter/nf_tables_offload.c:471 nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline] nft_flow_rule_offload_commit+0x181/0x6a0 net/netfilter/nf_tables_offload.c:592 nf_tables_commit+0xd7b/0x9300 net/netfilter/nf_tables_api.c:11006 nfnetlink_rcv_batch+0x1a4d/0x2880 net/netfilter/nfnetlink.c:574 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline] nfnetlink_rcv+0x3bd/0x440 net/netfilter/nfnetlink.c:665 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767 __sys_sendmsg+0x160/0x210 net/socket.c:2799 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc955d9e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd9070fe58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fc956025fa0 RCX: 00007fc955d9e159 RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 RBP: 00007fc955e3506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc956025fac R14: 00007fc956025fa0 R15: 00007fc956025fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 lib/list_debug.c:62 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 3e 62 8c e8 37 de ec fb 90 <0f> 0b 4c 89 e7 e8 ec ff 24 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000662ef88 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff88802902db00 RCX: 0000000000000000 RDX: 000000000000006d RSI: ffffffff81ea37b9 RDI: fffff52000cc5de2 RBP: ffffffff9023d780 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000000 R11: 0000000000000001 R12: ffffffff9023d780 R13: 0000000000000001 R14: ffffc9000662f060 R15: ffffc9000662f060 FS: 000055556ed07500(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000600 CR3: 000000003efe7000 CR4: 0000000000352ef0