Extracting prog: 1h33m43.717803644s
Minimizing prog: 1h8m22.883035692s
Simplifying prog options: 0s
Extracting C: 3m8.251114022s
Simplifying C: 1h0m54.23824353s


extracting reproducer from 66 programs
testing a last program of every proc
single: executing 16 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket-getsockname$packet-socket$nl_route-sendmsg$nl_route-socket$inet_udplite-socket-sendmsg-setsockopt$sock_int-sendto-recvmmsg
detailed listing:
executing program 0:
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
r6 = socket(0x1e, 0x1, 0x0) (async)
sendmsg(r5, &(0x7f0000000d00)={&(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000002f00)=[{&(0x7f00000004c0)="b44d52f3ae04da9b4d28d5d6271f94f5c532e98eff9a22912f89bbce3845782333d2eb828bd3fd96e1a8c65f5710e16829f3aeeb29001b8848c39a9e442c5edc9e8eef47bf", 0x45}, {&(0x7f0000000c00)="e1ef07867cd20b7e3609b6586101ed1ea4069c5819744ab5654570cce49c2f0e9b3205ff6bb4121395a6a3ef6e4f03f3084d697d6b82e349ca6e5a0705021180dabe205b8e7389c2a79b287c20a7c20feb1eca9a3147191f802aa20643abaa14717b3a7f1d4def3b0f3851b1229bc9624bd06a75735d6485b82a8b10d565ecddee1692e6920767ba5403a3ce6a919674fe2f9b97c8f0f106723f06bcb5f926db6d6b0b97f14716188639b0388a3c405239cdba78b74ff39a6b01580db9671fc8ef3159013fe5d7fc488e2bd8a5ab0b7d997fa40ffb7ad6dcc4f5c2017e285534d2fec3914796c7bb62af830c6b9eb8bb09ff84", 0xf3}, {&(0x7f0000002b40)="6104a155a10a48fe9509aa060136b37cc68325b1813965e9545d1ea010c0280faf091aae1eaa3d65d8392be1fb8b2c959112c73282be53e66fe44ea35c8d8fefc262803fcde17c6f09d1064a1558ccaf62df98210abf05cee40ceb9922e97773ed829f3639e5da88db90e9b8e16f9b853cd505f25c7ecf8b84429348a11c6d2a9f81772c989c904a95405cd4f0df3e63e6a852b77c198f26d0b8b0360b43b12158e46bbe785a77a99336605b7ac2", 0xae}, {&(0x7f0000002c00)="5c79f5dd4cb3f5f3f1c1a19219e5d6017bfbbf42021118d802c6c1d8dc92e57bbdf1b451845a8f2c2e7d478d116c42fcf1c3076cab9bfe874c19307ff636f7429420d869ff36e11320459afed7df3d529118da47e7362c3318478a7220f98befd534dfb5cacd42fe5d390d7c10cf25c27ad077a42f3e3f84a286f37637dfbd04743c043c1d455ff707c3e6b033d1a5b9c5e5b3b40d91507d518d1502b39e7157eb562f2af6e197f85294a1e95a842a8b006e8868cabecac1c6fcf2209ebb82f1238c568e9be6", 0xc6}, {&(0x7f0000000900)="968610fae4e63aa21a75be401aff99207599480dd17f3e34271a1b07eb933d9d8ec5515b6221adb016adbe821ca0a7ab76d0919ab73ae30080943a990139b97e552af5ac09094a47871bfb20f85d09656cfb20b066d41211b44d71649dda7b23d231374b39f66a34e87cc427e9476d1a45102e2019d4fd51f466d6d63d327286", 0x80}, {&(0x7f0000002d00)="47e628fdb4d426951ef85cbc808b5132f01ef656d9cac912d224767f6ce50202296fed255ad78ded6f32ed0aed8f930fbcf6a6220a09fb4f49da49bd1e212a0371b2b69ac96afe05ba459a94ca068677f7ca98601b7468bf20ab4a0c86501258f662ff75f841f83a72f577a1a35995d89dd64badb0b2efc2cdb31227e0660cb348ad6b8c0cd2aa00cc01be01d26292123d9075f901d59c3312278ae3e7c3d226d8fc93e2bf74f5fb9876f56443e8a41d1d0bc50146d1206dc45001ad934499b9090da4bd8336ba", 0xc7}, {&(0x7f0000000240)="dcc9a236379a913146df4f39e49acaab7d9f9dae0e188ddb0655893d4ce901ae331b", 0x22}, {&(0x7f0000002e00)="1075af1f9ebdeb6595544db9ff1e515054df4171b8680f6dc14d80d069d3e1f677b772ad8576a9b1734813ec4d7d211e6b17c6207152990ccb23eafc78452dbede940eeaaa160f281147ff5f1b87351da47bfff398e61275a7eb486296d74fa0213a68f44abaa1d3fe3b9b58bbda64055d57351c2978f5bc50f54cdf635410c332528152d5aad8f7c307b4f3d5dbb1d5a6a7c299c67e28571f000d38b5add4dd449306b2e0c8100ec7462bf8c6c4b912c5e3e2493adeb48aaac563a4db71fcc685c449", 0xc3}], 0x8}, 0x24008040)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000180), 0x4)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000001500)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}}, {{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f00000005c0)=""/219, 0xdb}], 0x2, &(0x7f0000000780)=""/187, 0xbb}, 0xa04}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/146, 0x92}], 0x1, &(0x7f0000000bc0)=""/1, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x4}, {{&(0x7f0000000d40)=@ieee802154, 0x80, &(0x7f0000001440)=[{&(0x7f0000000dc0)=""/231, 0xe7}, {&(0x7f0000000ec0)=""/85, 0x55}, {&(0x7f0000000f40)=""/35, 0x23}, {&(0x7f0000000f80)=""/193, 0xc1}, {&(0x7f0000001080)=""/170, 0xaa}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000001140)=""/236, 0xec}, {&(0x7f0000001240)=""/185, 0xb9}, {&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/118, 0x76}], 0xa, &(0x7f0000002600)=""/181, 0xb5}, 0xc}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000026c0)=""/130, 0x82}, {&(0x7f0000002780)=""/112, 0x70}, {&(0x7f0000002800)=""/220, 0xdc}, {&(0x7f0000002900)=""/5, 0x5}], 0x4, &(0x7f0000002980)=""/27, 0x1b}}], 0x6, 0x2100, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_init_net_socket$nl_generic-sendmsg$NFC_CMD_GET_TARGET-syz_genetlink_get_family_id$nfc-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$NFT_BATCH-socket-socket-sendmsg$nl_route_sched-getsockname$packet-setsockopt$XDP_UMEM_COMPLETION_RING-sendmsg$nl_route-sendmsg$can_j1939-socket$unix-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendto$packet-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_JOIN_IBSS-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$nl_route-sendmmsg$alg
detailed listing:
executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="87002fbd7000000000001e0000000a0004007770616e33000000080001001b"], 0x28}}, 0x4024044)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x9, 0xd}, {0x3}}}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x1000000, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0)
sendmsg$can_j1939(r0, 0x0, 0x81)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendto$packet(r0, &(0x7f0000000180)="f2987e2a8b", 0x5, 0x24044081, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x35, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x224, r8, 0x100, 0x2070bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x2, 0x6, 0x0, {0x9, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xfffffffe, 0x81}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_IE={0x19c, 0x2a, [@perr={0x84, 0xce, {0xd, 0xc, [{{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x8}, {{}, @device_a, 0xdb, @void, 0x36}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x8}, {{0x0, 0x1}, @device_b, 0x4, @value, 0xe}, {{0x0, 0x1}, @device_b, 0xd, @value=@broadcast, 0x29}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x36}, {{}, @device_a, 0xffffffff, @void, 0x1e}, {{}, @broadcast, 0x3, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value, 0x30}, {{}, @broadcast, 0x4, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0x58913e60, @value=@device_b, 0x28}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x3, 0xae, "90448c9094d53cd27dfdccdd8a8485cef172cb3fc9142056a916cdaa912ad5fb7aaa30f550edc4e2f91f5a77b91107d85fcea634527bf19efb1bc3bd9c6cd1c7afe105dfec324063af24a98c102b8eb6bf5c3045f08d033632ce3dfd960cd0eb28d1df1ca28a584f7e7a0c5a35dd9a8105aee7cd76334f66b93e4935a0f40b68d60b3fec06802d241bc7c5c6b00493db3761364e439179ba40b24de9b449d889585578d5facd6d94f3977e85080f"}, @supported_rates, @dsss={0x3, 0x1, 0x3}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x0, 0x1, 0x0, {0xa8, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x4, 0x2}}]}, 0x224}, 0x1, 0x0, 0x0, 0x14000000}, 0x80c0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-syz_init_net_socket$bt_l2cap-socket-socket-bind$vsock_stream-listen-connect$vsock_stream-sendmmsg-accept4$unix-mmap-recvfrom$unix-sendmmsg$inet-accept4-socket$inet_icmp_raw-recvmmsg
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r2 = socket(0x29, 0xa, 0x800) (async)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async)
r4 = accept4$unix(r3, 0x0, 0x0, 0x800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x5) (async)
recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}], 0x1, 0x40) (async)
r5 = accept4(r0, 0x0, 0x0, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r5, &(0x7f0000002cc0)=[{{&(0x7f0000000240)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1, &(0x7f0000000340)=""/213, 0xd5}, 0x1}, {{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/2, 0x2}, {&(0x7f0000001680)=""/194, 0xc2}, {&(0x7f0000001780)=""/136, 0x88}, {&(0x7f0000001840)=""/244, 0xf4}], 0x6, &(0x7f00000019c0)=""/95, 0x5f}, 0x3}, {{&(0x7f0000001a40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001ac0)=""/45, 0x2d}, {&(0x7f0000001b00)=""/254, 0xfe}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x3, &(0x7f0000002c40)=""/87, 0x57}, 0xf}], 0x3, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$inet6_tcp-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME-bind$inet6-setsockopt$IP6T_SO_SET_REPLACE
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="ce", 0x9, 0x1, 0xb57, 0x5, 0x9, 0x2, 0x7, 'syz0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0800a00005000000080005006c0b0000f6fa8ffa010000005000330050000000ffffffffffff08021100000050505050505000000000000000000000640000000406000000000000060201002d1a00"/104], 0x84}}, 0x80)
bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e20, 0x6, @private0, 0x3f8000}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x170, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
detailed listing:
executing program 0:
unshare(0x20800)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$inet6_tcp-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME-bind$inet6-setsockopt$IP6T_SO_SET_REPLACE
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="ce", 0x9, 0x1, 0xb57, 0x5, 0x9, 0x2, 0x7, 'syz0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0800a00005000000080005006c0b0000f6fa8ffa010000005000330050000000ffffffffffff08021100000050505050505000000000000000000000640000000406000000000000060201002d1a00"/104], 0x84}}, 0x80)
bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e20, 0x6, @private0, 0x3f8000}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x170, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$tun-socket$nl_generic-ioctl$TUNSETIFF-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_GET_BEARER_NAMES-bpf$PROG_LOAD-ioctl$TUNSETIFF-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-socket$nl_generic-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_GET_ADDR-socket$rxrpc-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-setsockopt$RXRPC_MIN_SECURITY_LEVEL-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$packet-socket$rds-sendmsg$kcm-connect$rds-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x1221})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdc03}, 0x1c}, 0x1, 0x0, 0x0, 0x4490}, 0x20000844)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f000000f680)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r3, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r9], 0x78}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140))
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r11}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r12 = socket$rds(0x15, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000480)=@isdn={0x22, 0x7, 0x7f, 0xa5, 0x4}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000500)="7fd2e3b6bbe71cbede337ec9796a578179f6fefb22315c5598c87a383015544493a7a77111695728b752acc21dae3d98cafb9c6ab93fa937b620c2d28da1e9d1e1288fe690c7799e90786a82f3e7ca498d888300f794105292f985c59b9bfff7b1fbc0fc16968908ded57cc0ba93e7ae57eba4c67a1d3d3efbfa79b0ac258563ea7612a726140dcf3d597403fc94c2540f0da463f0f49b2482d00986c936fe146581797e408a03fca52ebacc", 0xac}, {&(0x7f00000005c0)="0fd7d6b1b6fe4b0adea0b79f37de9d9296c9f43fe1129952ba52d4c2c51776f9486a6b5ebf338e5541e14a4cad496368c5929b72128d2626cf2429ad209f59f4c611860e", 0x44}, {&(0x7f0000000880)="b9b619cf1d5083899ea40d4d5e12a13e7a41d834d7e1d3fea77de9c89cfa99051e1357a228f3a3c0e5a513bb29d906cc2343f3467f7546b507b6b2a94aa7400fa7f533c33f529f3ecdccd98cd94fe520d682c9f835f5d1c98d1178092f73c2bc5227820fb0098f9a5e2c1b8e3c297c89fc716d2a86ec7fee46cfa33eda131f3d2221b4a034a941acf874195f778d76a19a5996e1e58471f7ab3eb20f9f570f3d7bf585cc63b25a98d994275dec", 0xad}, {&(0x7f0000000940)="706a7cd1a8f2bc1d5e780712e09c03e41bbda5777c654461a31f2e6570fc7ebaf3c6bd13c4a1d17cabae367b480cd99d43499fe83c8dbcb1904cd5342ca10c988df5120d17322ceb035a30dfe14baebba37bff776bb482cd5f140cde710f8d6b195c74a0b62fa55ae387c42b361c8fd3b349d2a47bcff6d98e8fdaec9f377c963ebf8631878a14e3dab8c988efb20652df6a62f5cf0b8633229218eb631a5a8d9bab647a6fb611474065513a", 0xac}, {&(0x7f0000000a00)="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", 0xfd}, {&(0x7f0000000b00)="1443b57a81cbf240b0ec4db2b04d49e778dec9407c1f39bd6d8a5fd57f5658f079f2d2d482f57dea5a8b2f934df3902b7e1cd1dbb95da96c098ae482c1f2effb246d999eb3b20290264b1e4f4905af52a3a1a248af4e843cb46b409596b4b8ec71b05f1b1ef9ddf2f751fdf559d5da6d10c96d2ceaee1532d38bb94e4edb2e3455aea099c7cc7ae3f1a0295b8360a28bb4148fcfa7bb3568729592a5c49f31ac9cdcf24d07c646d1fb132dfd47f9e0c9061239e16e0e50fec7a3077bbc476105f16f5dc0271f88", 0xc7}], 0x6}, 0x40)
connect$rds(r12, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@ipv6_newroute={0x1d4, 0x18, 0x20, 0x70bd2b, 0x5, {0xa, 0x10, 0x4, 0x3, 0xfd, 0x2, 0xfd, 0xa, 0x3800}, [@RTA_METRICS={0x16c, 0x8, 0x0, 0x1, "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"}, @RTA_IIF={0x8, 0x3, r4}, @RTA_IIF={0x8, 0x3, r4}, @RTA_PRIORITY={0x0, 0x6, 0x800}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x11, 0x9, r4}}, @RTA_IIF={0x8, 0x3, r4}, @RTA_ENCAP={0x12, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0xdb, 0x18, 0x1, 0x80, 0x7, [@loopback]}}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x402c001)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$tun-socket$nl_generic-ioctl$TUNSETIFF-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_GET_BEARER_NAMES-bpf$PROG_LOAD-ioctl$TUNSETIFF-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-socket$nl_generic-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_GET_ADDR-socket$rxrpc-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-setsockopt$RXRPC_MIN_SECURITY_LEVEL-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$packet-socket$rds-sendmsg$kcm-connect$rds-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x1221})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdc03}, 0x1c}, 0x1, 0x0, 0x0, 0x4490}, 0x20000844)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f000000f680)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r3, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r9], 0x78}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140))
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r11}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r12 = socket$rds(0x15, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000480)=@isdn={0x22, 0x7, 0x7f, 0xa5, 0x4}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000500)="7fd2e3b6bbe71cbede337ec9796a578179f6fefb22315c5598c87a383015544493a7a77111695728b752acc21dae3d98cafb9c6ab93fa937b620c2d28da1e9d1e1288fe690c7799e90786a82f3e7ca498d888300f794105292f985c59b9bfff7b1fbc0fc16968908ded57cc0ba93e7ae57eba4c67a1d3d3efbfa79b0ac258563ea7612a726140dcf3d597403fc94c2540f0da463f0f49b2482d00986c936fe146581797e408a03fca52ebacc", 0xac}, {&(0x7f00000005c0)="0fd7d6b1b6fe4b0adea0b79f37de9d9296c9f43fe1129952ba52d4c2c51776f9486a6b5ebf338e5541e14a4cad496368c5929b72128d2626cf2429ad209f59f4c611860e", 0x44}, {&(0x7f0000000880)="b9b619cf1d5083899ea40d4d5e12a13e7a41d834d7e1d3fea77de9c89cfa99051e1357a228f3a3c0e5a513bb29d906cc2343f3467f7546b507b6b2a94aa7400fa7f533c33f529f3ecdccd98cd94fe520d682c9f835f5d1c98d1178092f73c2bc5227820fb0098f9a5e2c1b8e3c297c89fc716d2a86ec7fee46cfa33eda131f3d2221b4a034a941acf874195f778d76a19a5996e1e58471f7ab3eb20f9f570f3d7bf585cc63b25a98d994275dec", 0xad}, {&(0x7f0000000940)="706a7cd1a8f2bc1d5e780712e09c03e41bbda5777c654461a31f2e6570fc7ebaf3c6bd13c4a1d17cabae367b480cd99d43499fe83c8dbcb1904cd5342ca10c988df5120d17322ceb035a30dfe14baebba37bff776bb482cd5f140cde710f8d6b195c74a0b62fa55ae387c42b361c8fd3b349d2a47bcff6d98e8fdaec9f377c963ebf8631878a14e3dab8c988efb20652df6a62f5cf0b8633229218eb631a5a8d9bab647a6fb611474065513a", 0xac}, {&(0x7f0000000a00)="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", 0xfd}, {&(0x7f0000000b00)="1443b57a81cbf240b0ec4db2b04d49e778dec9407c1f39bd6d8a5fd57f5658f079f2d2d482f57dea5a8b2f934df3902b7e1cd1dbb95da96c098ae482c1f2effb246d999eb3b20290264b1e4f4905af52a3a1a248af4e843cb46b409596b4b8ec71b05f1b1ef9ddf2f751fdf559d5da6d10c96d2ceaee1532d38bb94e4edb2e3455aea099c7cc7ae3f1a0295b8360a28bb4148fcfa7bb3568729592a5c49f31ac9cdcf24d07c646d1fb132dfd47f9e0c9061239e16e0e50fec7a3077bbc476105f16f5dc0271f88", 0xc7}], 0x6}, 0x40)
connect$rds(r12, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@ipv6_newroute={0x1d4, 0x18, 0x20, 0x70bd2b, 0x5, {0xa, 0x10, 0x4, 0x3, 0xfd, 0x2, 0xfd, 0xa, 0x3800}, [@RTA_METRICS={0x16c, 0x8, 0x0, 0x1, "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"}, @RTA_IIF={0x8, 0x3, r4}, @RTA_IIF={0x8, 0x3, r4}, @RTA_PRIORITY={0x0, 0x6, 0x800}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x11, 0x9, r4}}, @RTA_IIF={0x8, 0x3, r4}, @RTA_ENCAP={0x12, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0xdb, 0x18, 0x1, 0x80, 0x7, [@loopback]}}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x402c001)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$IP6T_SO_SET_REPLACE-syz_init_net_socket$bt_l2cap-setsockopt$IPT_SO_SET_REPLACE-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-shutdown-ioctl$sock_bt_hidp_HIDPCONNDEL-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_netfilter-sendmsg$nl_route
detailed listing:
executing program 0:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x270, 0x3d8, 0x3d8, 0x270, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
shutdown(r0, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$IP6T_SO_SET_REPLACE-syz_init_net_socket$bt_l2cap-setsockopt$IPT_SO_SET_REPLACE-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-shutdown-ioctl$sock_bt_hidp_HIDPCONNDEL-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_netfilter-sendmsg$nl_route
detailed listing:
executing program 0:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x270, 0x3d8, 0x3d8, 0x270, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
shutdown(r0, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-bpf$MAP_CREATE-socket-bpf$MAP_UPDATE_ELEM-close-sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET-sendmsg$NFT_BATCH-setsockopt$sock_attach_bpf-recvmsg-recvmmsg-socket$kcm-close-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$nl_generic-sendmsg$nl_generic-socket$nl_xfrm-sendmsg$nl_xfrm-setsockopt$sock_attach_bpf-write$cgroup_subtree-getpeername$packet-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL
detailed listing:
executing program 0:
r0 = socket$kcm(0x1e, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
close(r3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000002fc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2c400040}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xbc}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/180, 0xb4}, 0x597}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000000600)=""/248, 0xf8}], 0x4, &(0x7f00000004c0)=""/6, 0x6}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000500)}, {&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/78, 0x4e}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f0000001a00)=""/28, 0x1c}], 0x7, &(0x7f0000001ac0)=""/198, 0xc6}, 0x6}, {{&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/137, 0x89}], 0x2, &(0x7f0000002d40)=""/77, 0x4d}, 0x5}], 0x4, 0x100, &(0x7f0000002ec0)={0x0, 0x989680})
r5 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xfffffffffffffe10, &(0x7f0000000400)="e6", 0x9, 0x49, 0x7c0, 0xa0f, 0x0, 0x2, 0x7, 'syz1\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
getpeername$packet(r4, &(0x7f0000002f40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003000)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003180)={'erspan0\x00', &(0x7f0000003040)={'ip_vti0\x00', r10, 0x0, 0x20, 0x7, 0x100, {{0x47, 0x4, 0x0, 0x6, 0x11c, 0x66, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0xb, 0xf3, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0x42, 0x3, 0x2, [{@local, 0x1}, {@multicast2, 0x3}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x40}, {@rand_addr=0x64010102, 0xc}, {@loopback, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@private=0xa010101, 0x1ff}]}, @noop, @timestamp={0x44, 0x18, 0xee, 0x0, 0x2, [0x1, 0x7ff, 0x99f6b5e1, 0xc33e, 0x3]}, @end, @lsrr={0x83, 0x17, 0x15, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x8, [{@broadcast, 0x80}, {@remote, 0x4}, {@loopback, 0x5}, {@broadcast, 0x1ff}, {@broadcast, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0xc}]}, @timestamp_prespec={0x44, 0x4c, 0xde, 0x3, 0x6, [{@remote, 0x6d2f}, {@empty, 0x8}, {@broadcast, 0x8}, {@multicast2, 0xff7c}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x10000}, {@private=0xa010100, 0xd34}, {@remote, 0x7}]}]}}}}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-bpf$MAP_CREATE-socket-bpf$MAP_UPDATE_ELEM-close-sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET-sendmsg$NFT_BATCH-setsockopt$sock_attach_bpf-recvmsg-recvmmsg-socket$kcm-close-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$nl_generic-sendmsg$nl_generic-socket$nl_xfrm-sendmsg$nl_xfrm-setsockopt$sock_attach_bpf-write$cgroup_subtree-getpeername$packet-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL
detailed listing:
executing program 0:
r0 = socket$kcm(0x1e, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
close(r3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000002fc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2c400040}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xbc}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/180, 0xb4}, 0x597}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000000600)=""/248, 0xf8}], 0x4, &(0x7f00000004c0)=""/6, 0x6}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000500)}, {&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/78, 0x4e}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f0000001a00)=""/28, 0x1c}], 0x7, &(0x7f0000001ac0)=""/198, 0xc6}, 0x6}, {{&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/137, 0x89}], 0x2, &(0x7f0000002d40)=""/77, 0x4d}, 0x5}], 0x4, 0x100, &(0x7f0000002ec0)={0x0, 0x989680})
r5 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xfffffffffffffe10, &(0x7f0000000400)="e6", 0x9, 0x49, 0x7c0, 0xa0f, 0x0, 0x2, 0x7, 'syz1\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
getpeername$packet(r4, &(0x7f0000002f40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003000)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003180)={'erspan0\x00', &(0x7f0000003040)={'ip_vti0\x00', r10, 0x0, 0x20, 0x7, 0x100, {{0x47, 0x4, 0x0, 0x6, 0x11c, 0x66, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0xb, 0xf3, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0x42, 0x3, 0x2, [{@local, 0x1}, {@multicast2, 0x3}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x40}, {@rand_addr=0x64010102, 0xc}, {@loopback, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@private=0xa010101, 0x1ff}]}, @noop, @timestamp={0x44, 0x18, 0xee, 0x0, 0x2, [0x1, 0x7ff, 0x99f6b5e1, 0xc33e, 0x3]}, @end, @lsrr={0x83, 0x17, 0x15, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x8, [{@broadcast, 0x80}, {@remote, 0x4}, {@loopback, 0x5}, {@broadcast, 0x1ff}, {@broadcast, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0xc}]}, @timestamp_prespec={0x44, 0x4c, 0xde, 0x3, 0x6, [{@remote, 0x6d2f}, {@empty, 0x8}, {@broadcast, 0x8}, {@multicast2, 0xff7c}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x10000}, {@private=0xa010100, 0xd34}, {@remote, 0x7}]}]}}}}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-setsockopt$bt_BT_DEFER_SETUP-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_NEW-socket$nl_netfilter-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPGETCONNLIST-sendmsg$NFT_BATCH-close-bpf$BPF_PROG_TEST_RUN-socket$nl_generic-syz_genetlink_get_family_id$ipvs-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-write$cgroup_int-socket-setsockopt$ARPT_SO_SET_REPLACE-socket-sendmsg$nl_route-setsockopt$netlink_NETLINK_TX_RING-write-sendmsg$IPVS_CMD_GET_DEST
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000000c0))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x84}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f00000000c0)=0x1, 0x12)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000009000000000007020000", @ANYRES32, @ANYRES8=r4], 0x38}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x101}, 0x10)
write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24)
sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14010000", @ANYRES16=r8, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNDEL
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

program crashed: INFO: task hung in uevent_show
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

program crashed: INFO: task hung in hidp_session_remove
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)

program crashed: INFO: task hung in hidp_session_remove
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'}) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xfffffffffffffce9, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, &(0x7f0000000340), 0x9, 0x1, 0x457, 0x9, 0x8, 0x1, 0x1, 'syz1\x00'})

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD
program crashed: INFO: task hung in uevent_show
reproducing took 3h46m9.090234048s
repro crashed as (corrupted=false):
INFO: task udevd:5833 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:26760 pid:5833  tgid:5833  ppid:5211   task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746
 device_lock include/linux/device.h:922 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2730
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2424
 sysfs_kf_seq_show+0x32b/0x4a0 fs/sysfs/file.c:65
 seq_read_iter+0x461/0xda0 fs/seq_file.c:230
 new_sync_read fs/read_write.c:489 [inline]
 vfs_read+0x9a0/0xb90 fs/read_write.c:570
 ksys_read+0x19d/0x2d0 fs/read_write.c:713
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f037e99bb6a
RSP: 002b:00007fffd825d5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f134b9bbc0 RCX: 00007f037e99bb6a
RDX: 0000000000001000 RSI: 000055f134b97700 RDI: 0000000000000008
RBP: 000055f134b9bbc0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffd825da98 R15: 000000000000000a
 </TASK>
INFO: task khidpd_04570009:5838 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_04570009 state:D stack:26688 pid:5838  tgid:5838  ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_timeout+0xb1/0x2b0 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x32f/0x600 kernel/sched/completion.c:148
 __flush_work+0xa48/0xc60 kernel/workqueue.c:4244
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4364
 hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169
 l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1733
 hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz-executor338:5919 blocked for more than 144 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor338 state:D
 stack:26728 pid:5919  tgid:5919  ppid:5830   task_flags:0x400140 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746
 l2cap_chan_connect+0x102/0xea0 net/bluetooth/l2cap_core.c:6955
 l2cap_sock_connect+0x622/0x950 net/bluetooth/l2cap_sock.c:256
 __sys_connect_file net/socket.c:2038 [inline]
 __sys_connect+0x28c/0x2d0 net/socket.c:2057
 __do_sys_connect net/socket.c:2063 [inline]
 __se_sys_connect net/socket.c:2060 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:2060
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8a934220c9
RSP: 002b:00007ffefb5f6de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a934220c9
RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004
RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000555500000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefb5f6e30
R13: 00007ffefb5f6e40 R14: 00000000000111f3 R15: 00007ffefb5f6e00
 </TASK>

Showing all locks held in the system:
8 locks held by kworker/1:0/24:
1 lock held by khungtaskd/31:
 #0: 
ffffffff8ed3df20
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: debug_show_all_locks+0x30/0x180 kernel/locking/lockdep.c:6764
2 locks held by getty/5588:
 #0: 
ffff8880361d20a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900033532f0
 (
&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 drivers/tty/n_tty.c:2222
4 locks held by udevd/5833:
 #0: ffff8880340fe0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 fs/seq_file.c:182
 #1: ffff88802ff47488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff8880359aba58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff88807a4e5a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline]
 #3: ffff88807a4e5a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2730
2 locks held by khidpd_04570009/5838:
 #0: ffff88807e404078
 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1727
 #1: ffffffff9028c450 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165
1 lock held by syz-executor338/5919:
 #0: ffff88807e404078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0x102/0xea0 net/bluetooth/l2cap_core.c:6955

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x4ab/0x4e0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0x1058/0x10a0 kernel/hung_task.c:437
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: events hidp_session_dev_work
RIP: 0010:serial8250_console_write+0x51/0x1e00 drivers/tty/serial/8250/8250_port.c:3403
Code: ff 48 8d 05 81 11 d2 0d 65 48 8b 00 48 89 84 24 80 01 00 00 49 bd 00 00 00 00 00 fc ff df 48 c7 84 24 c0 00 00 00 b3 8a b5 41 <48> c7 84 24 c8 00 00 00 de 7b 6e 8e 48 c7 84 24 d0 00 00 00 70 4e
RSP: 0018:ffffc900001e6b80 EFLAGS: 00000082
RAX: 8b04762b6c1ea300 RBX: ffffffff85953770 RCX: ffff88801d6e8000
RDX: 0000000000000023 RSI: ffffffff9a778c20 RDI: ffffffff9aa7db40
RBP: ffffc900001e6d50 R08: ffffffff859537b3 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff85953770 R12: ffffffff8f5a1cc0
R13: dffffc0000000000 R14: 0000000000000200 R15: ffffffff9aa7db40
FS:  0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8a934787c8 CR3: 000000000eb38000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 console_emit_next_record kernel/printk/printk.c:3138 [inline]
 console_flush_all+0x86b/0xec0 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0x151/0x3b0 kernel/printk/printk.c:3325
 vprintk_emit+0x761/0xa40 kernel/printk/printk.c:2450
 dev_vprintk_emit+0x358/0x420 drivers/base/core.c:4891
 dev_printk_emit+0xdf/0x130 drivers/base/core.c:4902
 _dev_warn+0x12d/0x180 drivers/base/core.c:4958
 hid_parser_main+0x896/0xc40 drivers/hid/hid-core.c:-1
 hid_open_report+0xbda/0x1590 drivers/hid/hid-core.c:1328
 hid_parse include/linux/hid.h:1126 [inline]
 mt_probe+0x522/0xbd0 drivers/hid/hid-multitouch.c:1822
 __hid_device_probe drivers/hid/hid-core.c:2717 [inline]
 hid_device_probe+0x3bf/0x710 drivers/hid/hid-core.c:2754
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2b9/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x258/0x2e0 drivers/base/bus.c:462
 __device_attach+0x341/0x530 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:537
 device_add+0x856/0xbf0 drivers/base/core.c:3666
 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2900
 hidp_session_dev_add net/bluetooth/hidp/core.c:856 [inline]
 hidp_session_dev_work+0x46/0x160 net/bluetooth/hidp/core.c:895
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319
 worker_thread+0x870/0xd50 kernel/workqueue.c:3400
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.807 msecs

final repro crashed as (corrupted=false):
INFO: task udevd:5833 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D
 stack:26760 pid:5833  tgid:5833  ppid:5211   task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746
 device_lock include/linux/device.h:922 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2730
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2424
 sysfs_kf_seq_show+0x32b/0x4a0 fs/sysfs/file.c:65
 seq_read_iter+0x461/0xda0 fs/seq_file.c:230
 new_sync_read fs/read_write.c:489 [inline]
 vfs_read+0x9a0/0xb90 fs/read_write.c:570
 ksys_read+0x19d/0x2d0 fs/read_write.c:713
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f037e99bb6a
RSP: 002b:00007fffd825d5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f134b9bbc0 RCX: 00007f037e99bb6a
RDX: 0000000000001000 RSI: 000055f134b97700 RDI: 0000000000000008
RBP: 000055f134b9bbc0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007fffd825da98 R15: 000000000000000a
 </TASK>
INFO: task khidpd_04570009:5838 blocked for more than 143 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_04570009 state:D stack:26688 pid:5838  tgid:5838  ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_timeout+0xb1/0x2b0 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x32f/0x600 kernel/sched/completion.c:148
 __flush_work+0xa48/0xc60 kernel/workqueue.c:4244
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4364
 hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169
 l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1733
 hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz-executor338:5919 blocked for more than 144 seconds.
      Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor338 state:D
 stack:26728 pid:5919  tgid:5919  ppid:5830   task_flags:0x400140 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b88/0x5240 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6917
 __mutex_lock_common kernel/locking/mutex.c:678 [inline]
 __mutex_lock+0x805/0x10c0 kernel/locking/mutex.c:746
 l2cap_chan_connect+0x102/0xea0 net/bluetooth/l2cap_core.c:6955
 l2cap_sock_connect+0x622/0x950 net/bluetooth/l2cap_sock.c:256
 __sys_connect_file net/socket.c:2038 [inline]
 __sys_connect+0x28c/0x2d0 net/socket.c:2057
 __do_sys_connect net/socket.c:2063 [inline]
 __se_sys_connect net/socket.c:2060 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:2060
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8a934220c9
RSP: 002b:00007ffefb5f6de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a934220c9
RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004
RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000555500000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefb5f6e30
R13: 00007ffefb5f6e40 R14: 00000000000111f3 R15: 00007ffefb5f6e00
 </TASK>

Showing all locks held in the system:
8 locks held by kworker/1:0/24:
1 lock held by khungtaskd/31:
 #0: 
ffffffff8ed3df20
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: debug_show_all_locks+0x30/0x180 kernel/locking/lockdep.c:6764
2 locks held by getty/5588:
 #0: 
ffff8880361d20a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc900033532f0
 (
&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 drivers/tty/n_tty.c:2222
4 locks held by udevd/5833:
 #0: ffff8880340fe0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 fs/seq_file.c:182
 #1: ffff88802ff47488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff8880359aba58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff88807a4e5a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline]
 #3: ffff88807a4e5a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2730
2 locks held by khidpd_04570009/5838:
 #0: ffff88807e404078
 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1727
 #1: ffffffff9028c450 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165
1 lock held by syz-executor338/5919:
 #0: ffff88807e404078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0x102/0xea0 net/bluetooth/l2cap_core.c:6955

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x4ab/0x4e0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline]
 watchdog+0x1058/0x10a0 kernel/hung_task.c:437
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: events hidp_session_dev_work
RIP: 0010:serial8250_console_write+0x51/0x1e00 drivers/tty/serial/8250/8250_port.c:3403
Code: ff 48 8d 05 81 11 d2 0d 65 48 8b 00 48 89 84 24 80 01 00 00 49 bd 00 00 00 00 00 fc ff df 48 c7 84 24 c0 00 00 00 b3 8a b5 41 <48> c7 84 24 c8 00 00 00 de 7b 6e 8e 48 c7 84 24 d0 00 00 00 70 4e
RSP: 0018:ffffc900001e6b80 EFLAGS: 00000082
RAX: 8b04762b6c1ea300 RBX: ffffffff85953770 RCX: ffff88801d6e8000
RDX: 0000000000000023 RSI: ffffffff9a778c20 RDI: ffffffff9aa7db40
RBP: ffffc900001e6d50 R08: ffffffff859537b3 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff85953770 R12: ffffffff8f5a1cc0
R13: dffffc0000000000 R14: 0000000000000200 R15: ffffffff9aa7db40
FS:  0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8a934787c8 CR3: 000000000eb38000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 console_emit_next_record kernel/printk/printk.c:3138 [inline]
 console_flush_all+0x86b/0xec0 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0x151/0x3b0 kernel/printk/printk.c:3325
 vprintk_emit+0x761/0xa40 kernel/printk/printk.c:2450
 dev_vprintk_emit+0x358/0x420 drivers/base/core.c:4891
 dev_printk_emit+0xdf/0x130 drivers/base/core.c:4902
 _dev_warn+0x12d/0x180 drivers/base/core.c:4958
 hid_parser_main+0x896/0xc40 drivers/hid/hid-core.c:-1
 hid_open_report+0xbda/0x1590 drivers/hid/hid-core.c:1328
 hid_parse include/linux/hid.h:1126 [inline]
 mt_probe+0x522/0xbd0 drivers/hid/hid-multitouch.c:1822
 __hid_device_probe drivers/hid/hid-core.c:2717 [inline]
 hid_device_probe+0x3bf/0x710 drivers/hid/hid-core.c:2754
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x2b9/0xad0 drivers/base/dd.c:658
 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800
 driver_probe_device+0x50/0x430 drivers/base/dd.c:830
 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958
 bus_for_each_drv+0x258/0x2e0 drivers/base/bus.c:462
 __device_attach+0x341/0x530 drivers/base/dd.c:1030
 bus_probe_device+0x189/0x260 drivers/base/bus.c:537
 device_add+0x856/0xbf0 drivers/base/core.c:3666
 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2900
 hidp_session_dev_add net/bluetooth/hidp/core.c:856 [inline]
 hidp_session_dev_work+0x46/0x160 net/bluetooth/hidp/core.c:895
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319
 worker_thread+0x870/0xd50 kernel/workqueue.c:3400
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.807 msecs