Extracting prog: 3h22m31.990479232s
Minimizing prog: 1h33m52.588610014s
Simplifying prog options: 0s
Extracting C: 6m44.760079695s
Simplifying C: 36m38.384718254s


extracting reproducer from 31 programs
testing a last program of every proc
single: executing 6 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-socket$nl_route-socket$netlink-socket$netlink-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$packet-bpf$MAP_CREATE-bpf$PROG_LOAD-setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_PROG_TEST_RUN-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-sendto$packet-sendmsg$TCPDIAG_GETSOCK-socket$nl_netfilter-sendmsg-sendmsg$netlink
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "acb22be42d07a69bc74c522e141ae42b272e816ba60bf8f84cc7ad8db3ccce575b371034eaa11008bed81279fbff493cd0c3b039aa75c7a31acc7c6fa57a7ad58ae38c5aac5712a4422a051de6d85e9f8928a8e8eb33f14b3a0a7296b1377412605e279d4584a169469172ffa9d560f04833243c386c982e335453a28ef7d659777d46fdf0994aad3a3af44c9e2c64150fdaecbf83adc0e873db47fa6a5fd4575ecc9ae764afbb6638ffba3d4264ac8bf63053ed5ef6740aa31015c1c06164a87c8f989d15e25b041d844bab832b1522b2b64a227c16c55b6b65d3cacf2929ead0b1069c55b31456aad9fe835ca5518a4d211dca004972aaf983c963499790b3831a41e68d87d961cd37fb8ecb906f3feec835dd45e350b78df435f438bd9cc71d4276904916560f18c51f8c3588e3b1d440f8c9dad5d59bd64c9a12e4b4252dd535544b5649273c378ff557d1bfedd4c0344a8fe8194554b4f6a0eb0cd72cdd54d969ab37e68acf0cd67d5c585827cc70cac5aa262c663cc447cb6e379abedef277607f73a74909a2b51e134fd05b1ca2ff6558746106efa3ea23d88f28a74d7972f2fc9a01dc951ae1d0f0621083db52e89f905b4adef3589848cba9675ed15f90d5364223ea226019149814ce475eac35509181e557d6f41232a387f32cc6bf34a75fa81e4eae8d4761e6fbca3dc7e290d2071d25538633ed166366b4d763d5788c19607a407b4a1683dc222bb9e5e2bb96e0297ec6196756a950c90a7e001567587d7153ffd44ce29a3c98168c378b76287c7160e002d5df92e6299f18335b1580f4204f718cee0798befb8dc1c6ee5c49501d5d2a773c4bbe5141944d9a87ec1878978eb40ca10624b506f002530cd6450fb72fded697b964302926b0830480ffaf4c36352514d6c0c66e81d78ea2a2b00af43a4a64d51e25c38dc9a6e6ff2e5911b087064819a90809b1eec83176215bdd308b4c17a08c788227d622e43a7a86e515fdb32584ca97f2a10a57a60483cd0ea3db521d76b4bba290eb28bfdcf233412bcb939210e95fd0cfeb093ca1acf42a0c6907c28ad542cb46cf219c937d7736b6d98b8b85ee2b59c8123fce942965ea10d485e38c60d7443d86d335747b59abc28582e39eb3012d7bdf2c31b7608ad59337af6a3a1fac6965c1005de892137e3086b68bdcd462ee8c7a2a655479df813d93fa6a10b76ae2568c4044e03042d6d8f7bef7af37da8ae2b1d33b62bdca5e5be8454101d6fb5d72a2b81f9582668e260e3ff79bb64599b90cd885c4fc4ad98421d20c71afe9a57a94aeacc3f7ee07531b7681f4ca75f6837b9e671a4abd422af5dcba3fba9414e1ddcb1d0adfcd92c4ba5a58ee1de8d0da4fa392aeff25ac117b39776c5038ce8d5fe94a1d650240b5ede4f4d395c70b73eb07cabe414ba8a231bb367d34c1eff9773982ae93a98e2be9ff21a45ac5a4dbc9aa7485330dd38195cce324cdbad5c026e39f5e695fa70efaf6e6fca0f9ec1385e57f6bc40dda911a5b77f6d0568821a8a6ec655ebf33f3e2e53cb29b05a734a388e3edbb9930a3830cea79f338c8a364de00dde1933ffc7d0f448094948c0d107123ff76116c559e11254e5887a39460b2e9a3ba3a3bb25abc92239c139373ffd94396beffd8ee061115d72e9d6f39d13f349a44f16a29f5aec0130a6de4333b5a9d090c470c647d93b2cdb21cb78ad015255333c255d1de027dc1636f9a05e331d8f34fef84c2a291f211524e11f78bd3a713adae71e347a14e4e2d16a74f64ee8bedce6ff77bff52ba12f85955d519d206f81852fb2fa87ad4df853e73ddc1a8b0a40971d91a78019fad1cdced7bfeaee5ef0b1823d134ba51adbbc05ce018cce8232c78038261186c9ab84289d73b44c1729f0538a624ac6c6056a126742ae447985989cc9cfaa46f12f4674b7656401c6065f24f092f0f91d9a44c00dbe232722943cba31381619ba558d8d113e146e59e5822d4f1d882b0d94f860383c19169492d90ce7362c5f7b1d0067855745dc2d6a93c2f5fa592ede93a1c29e9643794ae79c62efd2360bf787decc47174803bcd4be31f03237542eaa73dfe685e0c78e31d921e3d17200453bcc1e23dbd03c75b5add1593019a2da857ec071ed01097a45d873292b65312fd37d3913bfe10b283dcd6c312f280468588efdcd07480ec51b65a7cf10b63b98e749a1f51a9deb38f719c359475d0efbd96edb73c1f905ce514b72a9e0aac27a1e6894dbcc963ea4d266c2df06755eb0161c3b575df060202bd47a86a615b29a022459b9daeac92db42e7b5b59b1b48cad798421521cbc5506e3973e5d612335f937a0d26be8191dc89eada9e09675e3c9e45eb57f960b1aaab33b3ee4c4f798030d8a7ab29adf7c8096083b0589e7793b6773a1cde584a7d6fdae0b36c900be02103c08dc764157541b9c2ac0c68e1530c0afad4e2977fb2dfb839be1549c39a714bd15f1a47af331d594578faa944a1675034e1160199855a33cc1ba416715b45c625d95e05aadc95c7b0284177661d6b1c06cd969b1abfcae83a41a5a54ef9a13f79ade69ad320130b2c5bf488241dfe0f9f038281d1027ef65fd82567e2410ba8e4420fc6a40993859b713f59fa55b88dd9b1aa5550b9bd1de72c422168e45ab699cf47e6fe1a55b97750e4363aaede95225c465e519c4d1c022db63bc964a7c51441c307bad068920aa79f28c0ee1ff05a25f3a7a4bd548c6d3cb67602167f281d279bbad251b0e4d9d79bb9b0cf22564dd28f71465051d5fd7d54c8b06bfa02ee915cfbb9b06fbfe30fc3fe69b02d22dea2bf3a8e5841e4cc430ea80d392bde1edb1ac735d8d4b3aa1141c522132174ce93f18491ddc3ebcca73ef15a14a7e0a5a83fd9d743c28a9271ae9100ab786faf8911f3b324a2c4c5d38800efe409308d7a4ed16965a3eaec5db7e78ff5369fa8d7b95e7df0b23148447cf9dce0dee04c5d0649dc2ce0938961735310392e13c6b553a76b0190c61851c5525732284ac9d8c25cd82d8f802fd9ad89a6f1d337870d4f3437b575d2aa82b39dc5af49fee6cb3bf9eec23983b077fea6f85f525e0133d21feccf8893301554c7caa7786cac2488def4ca29817dd491a27863da359efc2d9dbd9099584e3b32c459d215bdf3fc7f214c8837068b98999d9288043d17105c214b28e9e3a4ba22f65efd2b3a499c24501617431c83d6ab6ce4ac7f1735173ccc72e10b87a2f761ba4652ecc91ff840e84c9a3e469b2445b585118ce2fc84018957471da33dff01ba7222ae38fd77ee2769f4dd6471d23b6953fcef04047011ce83481edca901a77b82004108fec21f69929a49f7aa42edc09a433012c2635fa0cf365facaf2d78e5ae55ff53ed24bafd8301c941ee5ac82b6fc34f2f185f73dc1ba315cac1d57ffb8247304de46ea723544bc1a22e9f0ad8bbc3bee901684d0dfc6db9995cd6dee0e8040737a111fa762980552305706e4e1c8234521e5679d998b2e811adbff5fa87d31a7304e5e22cb8134910a932716d733868381a395ad0be9aa4393442d46302394d187edb1817f2b3baf38a44e2e2e57eed86603d44c90e6aa4b0583a4dad8364d49c3fd1d20f1e22c5e55f3db0118a68a83a9baf6986389d703bc4f0ecf62180147b74587fba3ac60701b301fd6b6a9f448ddbbcb17c7fabd9aaa87f7a49a37fdb0ee01f3847a658fcc8edeac6c98ea475109bef46b0475585159ee83448d44223d6bb013c37e492c1f11e5ebf799127c5afddff186d2226c58e14775ab81079f3ddaa6631dd42be8e022879bd0ef1b9e7d9259ecd2413077c0ae6aa98e7b899a30b4608b22939dc0042facf29ee1a1617ceecf5b86577ba466d74cac3c68045cdfe2ae1b35206273318eb5b499ceb5a0aa180541a19e22de5f4935dd0371dbc374e0355334892f71d55b132e8ccc254984f4c50fb04e77a47eb09df0cac8a5eeb99aae81b389438eb2185eadcc5115d9972986d6f909fb77b132192010ae39f259c361ad0b60f70a4fcd45e8e7f7f26be2c8cd17acae223a9acbbd5f75b6896da8d29ff0dc794c3c75c8054ec5ff5229711251cebaa28b2e09ebf4ea50d1b7b6d9408dbd7934b859b213ae49eba5a61241f5abc8b937e0236fef02018329b405fc227cc268161008b376050e0aeb5ff7ef74dbb34b526609b3803cff4400e32c1e69b44075fbe5dff274dd46a332ae9ac666ea6a882609889b07073b4d8441a6a05f3a6f33c6740fb35c73df63389d075e55e9ebdcff61cf2f4ed6a57cce41ca7ef1027776e65a3d013939d358bfadba538b751632fb54b90792c8f13d0d0ca8b3a6046c724843c9d4c5c782d292fbeb009f024c2b3eb7c4a99e17be464992bd09d587b9a27a3e8c82446930075434bd73fd690eb8f50b4aad83ea8c190b9cc3e3d07a4e86c7e9d1734f09eb8ddd9551c3acb6dc91b3238732096ce016fc3cabfd7e2f82c09cded983fdb6f5f2f75c4b5084372621030bbc0601127dbc03a6edc9878da77c55a8503e9ffee8b82d2e0cd3a7fd848a52c3baa34b7db99832e910d5e168503da0d22298823ca9882e483435dd5e2f54eb444739d10821d3f754ec06767abdd8d14218aa80e30ec46ff09ca47040b1415632cce0fac22f606ad7cad1f4b8f7b008e841e1a6eab784885cbf5cc8ddd4b8b76e2aeb6be2c84ed259ee6ec406a7a9c0cb68e8b49567e2ee7e899782f19ac3edecba912161f3eae6ffcbddbeaa377c9db1e9435f52a17d0bea3cd51f272957c5588dd5b8116ca1d317a9adb9509d97d876e0a5b0a277484e5511c8a8e02a9d0e7c5882014fd4b423bc4efc623e6a65d541d59f80b739312cc5d3c57445288cbc14800b9d1dd7a43ce9a60eb2314297280d4b794bea0a65ae6f89b686af3a45ae80431bfbff749f319ac6ef63a8ca0dd69f4972b88a33b8ea6c5a3337b02302b8dedc1e8d7c8d7b4fe51184c39ad7540d35065ae82af3c78a09a6e1b24f23f5b8f4a207bc8266287865fcbf1132a8c7615ee642f5f8cd1ab062b74fadb7f44a26129bc22ea62eb877b47b19111943c0ae87509fb8b2860afd7d1045492e9ecdb359667fffffe2fc34851ee8c1f2356137ed90071500d53c77ee4e21b79a8736de6cd1382a04cf6fbec6693dd7869e1fa20259c70f9b7a2c4f8d7b2512cf8388fc918e836eb1ef8454e718c7cd155272e0c8512e49841267a01eccedfebe59a92da9eb73a74f0d72d3e9dfb95d3de792cb48a6d464cd252bd8fa6da367c0ea47a272aacf63c7f305f272535a20d536023f70039225e77d5234935e6396403a8d215dc152ef98913ff58659c862ca70cfd19252d9d5837f74c79b35a5cbf9bbda6fc94b077d55d6f77e77d33e6f59cb799e19334206954a93567539a4bca5cd0b9b1c0221b0bf910ff3d148a8b80de5a52c58ab2dfec82e5d00bbea4877407e3f14e5c131a7da868d5fd97396b006f7601fcc03e762feb442ecc1298f2983338b9404de9ad94461301442c042daaf5a801f104e8812d19947cc7e23320bac4f557dccedc5a9d7ea4c763dfc3f3bba795454658a4318d6a4cdf2de7e9bc967d9305fab6972804d7f09577bec7b88262af75b06ed4ac658bc096d10beeed07685bcfb591e5ef5d16ef843729816f40568c2be83185b71db10315b143b0c3a5b72347e880214d20a9ba10e738fc0a1f0b61fcf06ed520a28d9ce05c95bde1d8b473cd4619deff7bd27bc6e7d99f7e71e80e3e7bb4286e177cb8566f82e59dda9af6a09e1352f317b348c3e1d54ad4d86a3a39ad"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-mkdirat$cgroup-write$cgroup_devices-write$cgroup_devices
detailed listing:
executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* r'], 0x9)
write$cgroup_devices(r1, &(0x7f0000000600)={'b', ' *:* ', 'm\x00'}, 0x8)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ipvs-sendmsg$IPVS_CMD_NEW_SERVICE-sendmsg$IPVS_CMD_NEW_DEST-socket$inet6_udp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm-recvmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-socket$nl_route-socket$netlink-socket$netlink-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$packet-bpf$MAP_CREATE-bpf$PROG_LOAD-setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_PROG_TEST_RUN-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-sendto$packet-sendmsg$TCPDIAG_GETSOCK-socket$nl_netfilter-sendmsg-sendmsg$netlink
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x2c}}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 6m0s
testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 1, 2, 8, 3, 2, 6, 2, 2, 2, 2, 8, 3, 6, 1, 1, 1, 11, 3, 3, 2, 3, 2, 1, 5, 20, 3, 3, 6, 6, 20]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000500)="08021100950108021100ffff80f3", 0xe)
executing program 2:
syz_emit_ethernet(0x26, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344"}}}}, 0x0)
executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a0000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd70000300800002000200"], 0x160}}, 0x4004004)
executing program 2:
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r4], 0x14)
executing program 2:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44"], 0xb4}}, 0x8044)
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x2c}}, 0x0)
executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0)
executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0)
executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x100001, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}}, 0x24}}, 0x4044004)
executing program 0:
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x57c02931d9dbff28}, 0x0)
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)
executing program 0:
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050e"], 0x0)
executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010020000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56}, 0x28)
executing program 3:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784ff", 0x16}], 0x1}, 0x800)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
write(r4, &(0x7f0000000500)="08021100950108021100ffff80f3", 0xe)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0x8f141000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={{r0}, 0x9, 0x0, 0x31c0})
executing program 1:
unshare(0x22020600)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)
executing program 4:
unshare(0x400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)
executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
syz_emit_ethernet(0x7c, &(0x7f0000001480)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x200, [0x5]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0)
executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
setsockopt(r0, 0x1, 0xffffff00, &(0x7f0000000480)="fcaaeb187d", 0x5)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
executing program 3:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000001a80)=""/4084, 0xff4}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000280)=""/135, 0x87}], 0x7}, 0x9}], 0x4, 0x40010000, 0x0)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* r'], 0x9)
write$cgroup_devices(r1, &(0x7f0000000600)={'b', ' *:* ', 'm\x00'}, 0x8)
executing program 32:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "acb22be42d07a69bc74c522e141ae42b272e816ba60bf8f84cc7ad8db3ccce575b371034eaa11008bed81279fbff493cd0c3b039aa75c7a31acc7c6fa57a7ad58ae38c5aac5712a4422a051de6d85e9f8928a8e8eb33f14b3a0a7296b1377412605e279d4584a169469172ffa9d560f04833243c386c982e335453a28ef7d659777d46fdf0994aad3a3af44c9e2c64150fdaecbf83adc0e873db47fa6a5fd4575ecc9ae764afbb6638ffba3d4264ac8bf63053ed5ef6740aa31015c1c06164a87c8f989d15e25b041d844bab832b1522b2b64a227c16c55b6b65d3cacf2929ead0b1069c55b31456aad9fe835ca5518a4d211dca004972aaf983c963499790b3831a41e68d87d961cd37fb8ecb906f3feec835dd45e350b78df435f438bd9cc71d4276904916560f18c51f8c3588e3b1d440f8c9dad5d59bd64c9a12e4b4252dd535544b5649273c378ff557d1bfedd4c0344a8fe8194554b4f6a0eb0cd72cdd54d969ab37e68acf0cd67d5c585827cc70cac5aa262c663cc447cb6e379abedef277607f73a74909a2b51e134fd05b1ca2ff6558746106efa3ea23d88f28a74d7972f2fc9a01dc951ae1d0f0621083db52e89f905b4adef3589848cba9675ed15f90d5364223ea226019149814ce475eac35509181e557d6f41232a387f32cc6bf34a75fa81e4eae8d4761e6fbca3dc7e290d2071d25538633ed166366b4d763d5788c19607a407b4a1683dc222bb9e5e2bb96e0297ec6196756a950c90a7e001567587d7153ffd44ce29a3c98168c378b76287c7160e002d5df92e6299f18335b1580f4204f718cee0798befb8dc1c6ee5c49501d5d2a773c4bbe5141944d9a87ec1878978eb40ca10624b506f002530cd6450fb72fded697b964302926b0830480ffaf4c36352514d6c0c66e81d78ea2a2b00af43a4a64d51e25c38dc9a6e6ff2e5911b087064819a90809b1eec83176215bdd308b4c17a08c788227d622e43a7a86e515fdb32584ca97f2a10a57a60483cd0ea3db521d76b4bba290eb28bfdcf233412bcb939210e95fd0cfeb093ca1acf42a0c6907c28ad542cb46cf219c937d7736b6d98b8b85ee2b59c8123fce942965ea10d485e38c60d7443d86d335747b59abc28582e39eb3012d7bdf2c31b7608ad59337af6a3a1fac6965c1005de892137e3086b68bdcd462ee8c7a2a655479df813d93fa6a10b76ae2568c4044e03042d6d8f7bef7af37da8ae2b1d33b62bdca5e5be8454101d6fb5d72a2b81f9582668e260e3ff79bb64599b90cd885c4fc4ad98421d20c71afe9a57a94aeacc3f7ee07531b7681f4ca75f6837b9e671a4abd422af5dcba3fba9414e1ddcb1d0adfcd92c4ba5a58ee1de8d0da4fa392aeff25ac117b39776c5038ce8d5fe94a1d650240b5ede4f4d395c70b73eb07cabe414ba8a231bb367d34c1eff9773982ae93a98e2be9ff21a45ac5a4dbc9aa7485330dd38195cce324cdbad5c026e39f5e695fa70efaf6e6fca0f9ec1385e57f6bc40dda911a5b77f6d0568821a8a6ec655ebf33f3e2e53cb29b05a734a388e3edbb9930a3830cea79f338c8a364de00dde1933ffc7d0f448094948c0d107123ff76116c559e11254e5887a39460b2e9a3ba3a3bb25abc92239c139373ffd94396beffd8ee061115d72e9d6f39d13f349a44f16a29f5aec0130a6de4333b5a9d090c470c647d93b2cdb21cb78ad015255333c255d1de027dc1636f9a05e331d8f34fef84c2a291f211524e11f78bd3a713adae71e347a14e4e2d16a74f64ee8bedce6ff77bff52ba12f85955d519d206f81852fb2fa87ad4df853e73ddc1a8b0a40971d91a78019fad1cdced7bfeaee5ef0b1823d134ba51adbbc05ce018cce8232c78038261186c9ab84289d73b44c1729f0538a624ac6c6056a126742ae447985989cc9cfaa46f12f4674b7656401c6065f24f092f0f91d9a44c00dbe232722943cba31381619ba558d8d113e146e59e5822d4f1d882b0d94f860383c19169492d90ce7362c5f7b1d0067855745dc2d6a93c2f5fa592ede93a1c29e9643794ae79c62efd2360bf787decc47174803bcd4be31f03237542eaa73dfe685e0c78e31d921e3d17200453bcc1e23dbd03c75b5add1593019a2da857ec071ed01097a45d873292b65312fd37d3913bfe10b283dcd6c312f280468588efdcd07480ec51b65a7cf10b63b98e749a1f51a9deb38f719c359475d0efbd96edb73c1f905ce514b72a9e0aac27a1e6894dbcc963ea4d266c2df06755eb0161c3b575df060202bd47a86a615b29a022459b9daeac92db42e7b5b59b1b48cad798421521cbc5506e3973e5d612335f937a0d26be8191dc89eada9e09675e3c9e45eb57f960b1aaab33b3ee4c4f798030d8a7ab29adf7c8096083b0589e7793b6773a1cde584a7d6fdae0b36c900be02103c08dc764157541b9c2ac0c68e1530c0afad4e2977fb2dfb839be1549c39a714bd15f1a47af331d594578faa944a1675034e1160199855a33cc1ba416715b45c625d95e05aadc95c7b0284177661d6b1c06cd969b1abfcae83a41a5a54ef9a13f79ade69ad320130b2c5bf488241dfe0f9f038281d1027ef65fd82567e2410ba8e4420fc6a40993859b713f59fa55b88dd9b1aa5550b9bd1de72c422168e45ab699cf47e6fe1a55b97750e4363aaede95225c465e519c4d1c022db63bc964a7c51441c307bad068920aa79f28c0ee1ff05a25f3a7a4bd548c6d3cb67602167f281d279bbad251b0e4d9d79bb9b0cf22564dd28f71465051d5fd7d54c8b06bfa02ee915cfbb9b06fbfe30fc3fe69b02d22dea2bf3a8e5841e4cc430ea80d392bde1edb1ac735d8d4b3aa1141c522132174ce93f18491ddc3ebcca73ef15a14a7e0a5a83fd9d743c28a9271ae9100ab786faf8911f3b324a2c4c5d38800efe409308d7a4ed16965a3eaec5db7e78ff5369fa8d7b95e7df0b23148447cf9dce0dee04c5d0649dc2ce0938961735310392e13c6b553a76b0190c61851c5525732284ac9d8c25cd82d8f802fd9ad89a6f1d337870d4f3437b575d2aa82b39dc5af49fee6cb3bf9eec23983b077fea6f85f525e0133d21feccf8893301554c7caa7786cac2488def4ca29817dd491a27863da359efc2d9dbd9099584e3b32c459d215bdf3fc7f214c8837068b98999d9288043d17105c214b28e9e3a4ba22f65efd2b3a499c24501617431c83d6ab6ce4ac7f1735173ccc72e10b87a2f761ba4652ecc91ff840e84c9a3e469b2445b585118ce2fc84018957471da33dff01ba7222ae38fd77ee2769f4dd6471d23b6953fcef04047011ce83481edca901a77b82004108fec21f69929a49f7aa42edc09a433012c2635fa0cf365facaf2d78e5ae55ff53ed24bafd8301c941ee5ac82b6fc34f2f185f73dc1ba315cac1d57ffb8247304de46ea723544bc1a22e9f0ad8bbc3bee901684d0dfc6db9995cd6dee0e8040737a111fa762980552305706e4e1c8234521e5679d998b2e811adbff5fa87d31a7304e5e22cb8134910a932716d733868381a395ad0be9aa4393442d46302394d187edb1817f2b3baf38a44e2e2e57eed86603d44c90e6aa4b0583a4dad8364d49c3fd1d20f1e22c5e55f3db0118a68a83a9baf6986389d703bc4f0ecf62180147b74587fba3ac60701b301fd6b6a9f448ddbbcb17c7fabd9aaa87f7a49a37fdb0ee01f3847a658fcc8edeac6c98ea475109bef46b0475585159ee83448d44223d6bb013c37e492c1f11e5ebf799127c5afddff186d2226c58e14775ab81079f3ddaa6631dd42be8e022879bd0ef1b9e7d9259ecd2413077c0ae6aa98e7b899a30b4608b22939dc0042facf29ee1a1617ceecf5b86577ba466d74cac3c68045cdfe2ae1b35206273318eb5b499ceb5a0aa180541a19e22de5f4935dd0371dbc374e0355334892f71d55b132e8ccc254984f4c50fb04e77a47eb09df0cac8a5eeb99aae81b389438eb2185eadcc5115d9972986d6f909fb77b132192010ae39f259c361ad0b60f70a4fcd45e8e7f7f26be2c8cd17acae223a9acbbd5f75b6896da8d29ff0dc794c3c75c8054ec5ff5229711251cebaa28b2e09ebf4ea50d1b7b6d9408dbd7934b859b213ae49eba5a61241f5abc8b937e0236fef02018329b405fc227cc268161008b376050e0aeb5ff7ef74dbb34b526609b3803cff4400e32c1e69b44075fbe5dff274dd46a332ae9ac666ea6a882609889b07073b4d8441a6a05f3a6f33c6740fb35c73df63389d075e55e9ebdcff61cf2f4ed6a57cce41ca7ef1027776e65a3d013939d358bfadba538b751632fb54b90792c8f13d0d0ca8b3a6046c724843c9d4c5c782d292fbeb009f024c2b3eb7c4a99e17be464992bd09d587b9a27a3e8c82446930075434bd73fd690eb8f50b4aad83ea8c190b9cc3e3d07a4e86c7e9d1734f09eb8ddd9551c3acb6dc91b3238732096ce016fc3cabfd7e2f82c09cded983fdb6f5f2f75c4b5084372621030bbc0601127dbc03a6edc9878da77c55a8503e9ffee8b82d2e0cd3a7fd848a52c3baa34b7db99832e910d5e168503da0d22298823ca9882e483435dd5e2f54eb444739d10821d3f754ec06767abdd8d14218aa80e30ec46ff09ca47040b1415632cce0fac22f606ad7cad1f4b8f7b008e841e1a6eab784885cbf5cc8ddd4b8b76e2aeb6be2c84ed259ee6ec406a7a9c0cb68e8b49567e2ee7e899782f19ac3edecba912161f3eae6ffcbddbeaa377c9db1e9435f52a17d0bea3cd51f272957c5588dd5b8116ca1d317a9adb9509d97d876e0a5b0a277484e5511c8a8e02a9d0e7c5882014fd4b423bc4efc623e6a65d541d59f80b739312cc5d3c57445288cbc14800b9d1dd7a43ce9a60eb2314297280d4b794bea0a65ae6f89b686af3a45ae80431bfbff749f319ac6ef63a8ca0dd69f4972b88a33b8ea6c5a3337b02302b8dedc1e8d7c8d7b4fe51184c39ad7540d35065ae82af3c78a09a6e1b24f23f5b8f4a207bc8266287865fcbf1132a8c7615ee642f5f8cd1ab062b74fadb7f44a26129bc22ea62eb877b47b19111943c0ae87509fb8b2860afd7d1045492e9ecdb359667fffffe2fc34851ee8c1f2356137ed90071500d53c77ee4e21b79a8736de6cd1382a04cf6fbec6693dd7869e1fa20259c70f9b7a2c4f8d7b2512cf8388fc918e836eb1ef8454e718c7cd155272e0c8512e49841267a01eccedfebe59a92da9eb73a74f0d72d3e9dfb95d3de792cb48a6d464cd252bd8fa6da367c0ea47a272aacf63c7f305f272535a20d536023f70039225e77d5234935e6396403a8d215dc152ef98913ff58659c862ca70cfd19252d9d5837f74c79b35a5cbf9bbda6fc94b077d55d6f77e77d33e6f59cb799e19334206954a93567539a4bca5cd0b9b1c0221b0bf910ff3d148a8b80de5a52c58ab2dfec82e5d00bbea4877407e3f14e5c131a7da868d5fd97396b006f7601fcc03e762feb442ecc1298f2983338b9404de9ad94461301442c042daaf5a801f104e8812d19947cc7e23320bac4f557dccedc5a9d7ea4c763dfc3f3bba795454658a4318d6a4cdf2de7e9bc967d9305fab6972804d7f09577bec7b88262af75b06ed4ac658bc096d10beeed07685bcfb591e5ef5d16ef843729816f40568c2be83185b71db10315b143b0c3a5b72347e880214d20a9ba10e738fc0a1f0b61fcf06ed520a28d9ce05c95bde1d8b473cd4619deff7bd27bc6e7d99f7e71e80e3e7bb4286e177cb8566f82e59dda9af6a09e1352f317b348c3e1d54ad4d86a3a39ad"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

program crashed: no output from test machine
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <31>
bisect: split chunk #0 of len 31 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 3, 6, 1, 1, 1, 11, 3, 3, 2, 3, 2, 1, 5, 20, 3, 3, 6, 6, 20]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)
executing program 0:
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050e"], 0x0)
executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010020000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56}, 0x28)
executing program 3:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784ff", 0x16}], 0x1}, 0x800)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
write(r4, &(0x7f0000000500)="08021100950108021100ffff80f3", 0xe)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0x8f141000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={{r0}, 0x9, 0x0, 0x31c0})
executing program 1:
unshare(0x22020600)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)
executing program 4:
unshare(0x400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)
executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
syz_emit_ethernet(0x7c, &(0x7f0000001480)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x200, [0x5]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0)
executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
setsockopt(r0, 0x1, 0xffffff00, &(0x7f0000000480)="fcaaeb187d", 0x5)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
executing program 3:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000001a80)=""/4084, 0xff4}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000280)=""/135, 0x87}], 0x7}, 0x9}], 0x4, 0x40010000, 0x0)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* r'], 0x9)
write$cgroup_devices(r1, &(0x7f0000000600)={'b', ' *:* ', 'm\x00'}, 0x8)
executing program 32:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "acb22be42d07a69bc74c522e141ae42b272e816ba60bf8f84cc7ad8db3ccce575b371034eaa11008bed81279fbff493cd0c3b039aa75c7a31acc7c6fa57a7ad58ae38c5aac5712a4422a051de6d85e9f8928a8e8eb33f14b3a0a7296b1377412605e279d4584a169469172ffa9d560f04833243c386c982e335453a28ef7d659777d46fdf0994aad3a3af44c9e2c64150fdaecbf83adc0e873db47fa6a5fd4575ecc9ae764afbb6638ffba3d4264ac8bf63053ed5ef6740aa31015c1c06164a87c8f989d15e25b041d844bab832b1522b2b64a227c16c55b6b65d3cacf2929ead0b1069c55b31456aad9fe835ca5518a4d211dca004972aaf983c963499790b3831a41e68d87d961cd37fb8ecb906f3feec835dd45e350b78df435f438bd9cc71d4276904916560f18c51f8c3588e3b1d440f8c9dad5d59bd64c9a12e4b4252dd535544b5649273c378ff557d1bfedd4c0344a8fe8194554b4f6a0eb0cd72cdd54d969ab37e68acf0cd67d5c585827cc70cac5aa262c663cc447cb6e379abedef277607f73a74909a2b51e134fd05b1ca2ff6558746106efa3ea23d88f28a74d7972f2fc9a01dc951ae1d0f0621083db52e89f905b4adef3589848cba9675ed15f90d5364223ea226019149814ce475eac35509181e557d6f41232a387f32cc6bf34a75fa81e4eae8d4761e6fbca3dc7e290d2071d25538633ed166366b4d763d5788c19607a407b4a1683dc222bb9e5e2bb96e0297ec6196756a950c90a7e001567587d7153ffd44ce29a3c98168c378b76287c7160e002d5df92e6299f18335b1580f4204f718cee0798befb8dc1c6ee5c49501d5d2a773c4bbe5141944d9a87ec1878978eb40ca10624b506f002530cd6450fb72fded697b964302926b0830480ffaf4c36352514d6c0c66e81d78ea2a2b00af43a4a64d51e25c38dc9a6e6ff2e5911b087064819a90809b1eec83176215bdd308b4c17a08c788227d622e43a7a86e515fdb32584ca97f2a10a57a60483cd0ea3db521d76b4bba290eb28bfdcf233412bcb939210e95fd0cfeb093ca1acf42a0c6907c28ad542cb46cf219c937d7736b6d98b8b85ee2b59c8123fce942965ea10d485e38c60d7443d86d335747b59abc28582e39eb3012d7bdf2c31b7608ad59337af6a3a1fac6965c1005de892137e3086b68bdcd462ee8c7a2a655479df813d93fa6a10b76ae2568c4044e03042d6d8f7bef7af37da8ae2b1d33b62bdca5e5be8454101d6fb5d72a2b81f9582668e260e3ff79bb64599b90cd885c4fc4ad98421d20c71afe9a57a94aeacc3f7ee07531b7681f4ca75f6837b9e671a4abd422af5dcba3fba9414e1ddcb1d0adfcd92c4ba5a58ee1de8d0da4fa392aeff25ac117b39776c5038ce8d5fe94a1d650240b5ede4f4d395c70b73eb07cabe414ba8a231bb367d34c1eff9773982ae93a98e2be9ff21a45ac5a4dbc9aa7485330dd38195cce324cdbad5c026e39f5e695fa70efaf6e6fca0f9ec1385e57f6bc40dda911a5b77f6d0568821a8a6ec655ebf33f3e2e53cb29b05a734a388e3edbb9930a3830cea79f338c8a364de00dde1933ffc7d0f448094948c0d107123ff76116c559e11254e5887a39460b2e9a3ba3a3bb25abc92239c139373ffd94396beffd8ee061115d72e9d6f39d13f349a44f16a29f5aec0130a6de4333b5a9d090c470c647d93b2cdb21cb78ad015255333c255d1de027dc1636f9a05e331d8f34fef84c2a291f211524e11f78bd3a713adae71e347a14e4e2d16a74f64ee8bedce6ff77bff52ba12f85955d519d206f81852fb2fa87ad4df853e73ddc1a8b0a40971d91a78019fad1cdced7bfeaee5ef0b1823d134ba51adbbc05ce018cce8232c78038261186c9ab84289d73b44c1729f0538a624ac6c6056a126742ae447985989cc9cfaa46f12f4674b7656401c6065f24f092f0f91d9a44c00dbe232722943cba31381619ba558d8d113e146e59e5822d4f1d882b0d94f860383c19169492d90ce7362c5f7b1d0067855745dc2d6a93c2f5fa592ede93a1c29e9643794ae79c62efd2360bf787decc47174803bcd4be31f03237542eaa73dfe685e0c78e31d921e3d17200453bcc1e23dbd03c75b5add1593019a2da857ec071ed01097a45d873292b65312fd37d3913bfe10b283dcd6c312f280468588efdcd07480ec51b65a7cf10b63b98e749a1f51a9deb38f719c359475d0efbd96edb73c1f905ce514b72a9e0aac27a1e6894dbcc963ea4d266c2df06755eb0161c3b575df060202bd47a86a615b29a022459b9daeac92db42e7b5b59b1b48cad798421521cbc5506e3973e5d612335f937a0d26be8191dc89eada9e09675e3c9e45eb57f960b1aaab33b3ee4c4f798030d8a7ab29adf7c8096083b0589e7793b6773a1cde584a7d6fdae0b36c900be02103c08dc764157541b9c2ac0c68e1530c0afad4e2977fb2dfb839be1549c39a714bd15f1a47af331d594578faa944a1675034e1160199855a33cc1ba416715b45c625d95e05aadc95c7b0284177661d6b1c06cd969b1abfcae83a41a5a54ef9a13f79ade69ad320130b2c5bf488241dfe0f9f038281d1027ef65fd82567e2410ba8e4420fc6a40993859b713f59fa55b88dd9b1aa5550b9bd1de72c422168e45ab699cf47e6fe1a55b97750e4363aaede95225c465e519c4d1c022db63bc964a7c51441c307bad068920aa79f28c0ee1ff05a25f3a7a4bd548c6d3cb67602167f281d279bbad251b0e4d9d79bb9b0cf22564dd28f71465051d5fd7d54c8b06bfa02ee915cfbb9b06fbfe30fc3fe69b02d22dea2bf3a8e5841e4cc430ea80d392bde1edb1ac735d8d4b3aa1141c522132174ce93f18491ddc3ebcca73ef15a14a7e0a5a83fd9d743c28a9271ae9100ab786faf8911f3b324a2c4c5d38800efe409308d7a4ed16965a3eaec5db7e78ff5369fa8d7b95e7df0b23148447cf9dce0dee04c5d0649dc2ce0938961735310392e13c6b553a76b0190c61851c5525732284ac9d8c25cd82d8f802fd9ad89a6f1d337870d4f3437b575d2aa82b39dc5af49fee6cb3bf9eec23983b077fea6f85f525e0133d21feccf8893301554c7caa7786cac2488def4ca29817dd491a27863da359efc2d9dbd9099584e3b32c459d215bdf3fc7f214c8837068b98999d9288043d17105c214b28e9e3a4ba22f65efd2b3a499c24501617431c83d6ab6ce4ac7f1735173ccc72e10b87a2f761ba4652ecc91ff840e84c9a3e469b2445b585118ce2fc84018957471da33dff01ba7222ae38fd77ee2769f4dd6471d23b6953fcef04047011ce83481edca901a77b82004108fec21f69929a49f7aa42edc09a433012c2635fa0cf365facaf2d78e5ae55ff53ed24bafd8301c941ee5ac82b6fc34f2f185f73dc1ba315cac1d57ffb8247304de46ea723544bc1a22e9f0ad8bbc3bee901684d0dfc6db9995cd6dee0e8040737a111fa762980552305706e4e1c8234521e5679d998b2e811adbff5fa87d31a7304e5e22cb8134910a932716d733868381a395ad0be9aa4393442d46302394d187edb1817f2b3baf38a44e2e2e57eed86603d44c90e6aa4b0583a4dad8364d49c3fd1d20f1e22c5e55f3db0118a68a83a9baf6986389d703bc4f0ecf62180147b74587fba3ac60701b301fd6b6a9f448ddbbcb17c7fabd9aaa87f7a49a37fdb0ee01f3847a658fcc8edeac6c98ea475109bef46b0475585159ee83448d44223d6bb013c37e492c1f11e5ebf799127c5afddff186d2226c58e14775ab81079f3ddaa6631dd42be8e022879bd0ef1b9e7d9259ecd2413077c0ae6aa98e7b899a30b4608b22939dc0042facf29ee1a1617ceecf5b86577ba466d74cac3c68045cdfe2ae1b35206273318eb5b499ceb5a0aa180541a19e22de5f4935dd0371dbc374e0355334892f71d55b132e8ccc254984f4c50fb04e77a47eb09df0cac8a5eeb99aae81b389438eb2185eadcc5115d9972986d6f909fb77b132192010ae39f259c361ad0b60f70a4fcd45e8e7f7f26be2c8cd17acae223a9acbbd5f75b6896da8d29ff0dc794c3c75c8054ec5ff5229711251cebaa28b2e09ebf4ea50d1b7b6d9408dbd7934b859b213ae49eba5a61241f5abc8b937e0236fef02018329b405fc227cc268161008b376050e0aeb5ff7ef74dbb34b526609b3803cff4400e32c1e69b44075fbe5dff274dd46a332ae9ac666ea6a882609889b07073b4d8441a6a05f3a6f33c6740fb35c73df63389d075e55e9ebdcff61cf2f4ed6a57cce41ca7ef1027776e65a3d013939d358bfadba538b751632fb54b90792c8f13d0d0ca8b3a6046c724843c9d4c5c782d292fbeb009f024c2b3eb7c4a99e17be464992bd09d587b9a27a3e8c82446930075434bd73fd690eb8f50b4aad83ea8c190b9cc3e3d07a4e86c7e9d1734f09eb8ddd9551c3acb6dc91b3238732096ce016fc3cabfd7e2f82c09cded983fdb6f5f2f75c4b5084372621030bbc0601127dbc03a6edc9878da77c55a8503e9ffee8b82d2e0cd3a7fd848a52c3baa34b7db99832e910d5e168503da0d22298823ca9882e483435dd5e2f54eb444739d10821d3f754ec06767abdd8d14218aa80e30ec46ff09ca47040b1415632cce0fac22f606ad7cad1f4b8f7b008e841e1a6eab784885cbf5cc8ddd4b8b76e2aeb6be2c84ed259ee6ec406a7a9c0cb68e8b49567e2ee7e899782f19ac3edecba912161f3eae6ffcbddbeaa377c9db1e9435f52a17d0bea3cd51f272957c5588dd5b8116ca1d317a9adb9509d97d876e0a5b0a277484e5511c8a8e02a9d0e7c5882014fd4b423bc4efc623e6a65d541d59f80b739312cc5d3c57445288cbc14800b9d1dd7a43ce9a60eb2314297280d4b794bea0a65ae6f89b686af3a45ae80431bfbff749f319ac6ef63a8ca0dd69f4972b88a33b8ea6c5a3337b02302b8dedc1e8d7c8d7b4fe51184c39ad7540d35065ae82af3c78a09a6e1b24f23f5b8f4a207bc8266287865fcbf1132a8c7615ee642f5f8cd1ab062b74fadb7f44a26129bc22ea62eb877b47b19111943c0ae87509fb8b2860afd7d1045492e9ecdb359667fffffe2fc34851ee8c1f2356137ed90071500d53c77ee4e21b79a8736de6cd1382a04cf6fbec6693dd7869e1fa20259c70f9b7a2c4f8d7b2512cf8388fc918e836eb1ef8454e718c7cd155272e0c8512e49841267a01eccedfebe59a92da9eb73a74f0d72d3e9dfb95d3de792cb48a6d464cd252bd8fa6da367c0ea47a272aacf63c7f305f272535a20d536023f70039225e77d5234935e6396403a8d215dc152ef98913ff58659c862ca70cfd19252d9d5837f74c79b35a5cbf9bbda6fc94b077d55d6f77e77d33e6f59cb799e19334206954a93567539a4bca5cd0b9b1c0221b0bf910ff3d148a8b80de5a52c58ab2dfec82e5d00bbea4877407e3f14e5c131a7da868d5fd97396b006f7601fcc03e762feb442ecc1298f2983338b9404de9ad94461301442c042daaf5a801f104e8812d19947cc7e23320bac4f557dccedc5a9d7ea4c763dfc3f3bba795454658a4318d6a4cdf2de7e9bc967d9305fab6972804d7f09577bec7b88262af75b06ed4ac658bc096d10beeed07685bcfb591e5ef5d16ef843729816f40568c2be83185b71db10315b143b0c3a5b72347e880214d20a9ba10e738fc0a1f0b61fcf06ed520a28d9ce05c95bde1d8b473cd4619deff7bd27bc6e7d99f7e71e80e3e7bb4286e177cb8566f82e59dda9af6a09e1352f317b348c3e1d54ad4d86a3a39ad"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

program crashed: INFO: task hung in addrconf_dad_work
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 5, 20, 3, 3, 6, 6, 20]
detailed listing:
executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
syz_emit_ethernet(0x7c, &(0x7f0000001480)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x200, [0x5]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0)
executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
setsockopt(r0, 0x1, 0xffffff00, &(0x7f0000000480)="fcaaeb187d", 0x5)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
executing program 3:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000001a80)=""/4084, 0xff4}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000280)=""/135, 0x87}], 0x7}, 0x9}], 0x4, 0x40010000, 0x0)
executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* r'], 0x9)
write$cgroup_devices(r1, &(0x7f0000000600)={'b', ' *:* ', 'm\x00'}, 0x8)
executing program 32:
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, {0x28, 0x46, 0x2, 0x80, {0x4e23, 0x4e23, [0x646f707a, 0xb0, 0x4, 0x4], [0x4, 0x7fffffff, 0xffffffff, 0x7ff], r4, [0x6, 0xa]}, 0x6, 0xbfcb}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "acb22be42d07a69bc74c522e141ae42b272e816ba60bf8f84cc7ad8db3ccce575b371034eaa11008bed81279fbff493cd0c3b039aa75c7a31acc7c6fa57a7ad58ae38c5aac5712a4422a051de6d85e9f8928a8e8eb33f14b3a0a7296b1377412605e279d4584a169469172ffa9d560f04833243c386c982e335453a28ef7d659777d46fdf0994aad3a3af44c9e2c64150fdaecbf83adc0e873db47fa6a5fd4575ecc9ae764afbb6638ffba3d4264ac8bf63053ed5ef6740aa31015c1c06164a87c8f989d15e25b041d844bab832b1522b2b64a227c16c55b6b65d3cacf2929ead0b1069c55b31456aad9fe835ca5518a4d211dca004972aaf983c963499790b3831a41e68d87d961cd37fb8ecb906f3feec835dd45e350b78df435f438bd9cc71d4276904916560f18c51f8c3588e3b1d440f8c9dad5d59bd64c9a12e4b4252dd535544b5649273c378ff557d1bfedd4c0344a8fe8194554b4f6a0eb0cd72cdd54d969ab37e68acf0cd67d5c585827cc70cac5aa262c663cc447cb6e379abedef277607f73a74909a2b51e134fd05b1ca2ff6558746106efa3ea23d88f28a74d7972f2fc9a01dc951ae1d0f0621083db52e89f905b4adef3589848cba9675ed15f90d5364223ea226019149814ce475eac35509181e557d6f41232a387f32cc6bf34a75fa81e4eae8d4761e6fbca3dc7e290d2071d25538633ed166366b4d763d5788c19607a407b4a1683dc222bb9e5e2bb96e0297ec6196756a950c90a7e001567587d7153ffd44ce29a3c98168c378b76287c7160e002d5df92e6299f18335b1580f4204f718cee0798befb8dc1c6ee5c49501d5d2a773c4bbe5141944d9a87ec1878978eb40ca10624b506f002530cd6450fb72fded697b964302926b0830480ffaf4c36352514d6c0c66e81d78ea2a2b00af43a4a64d51e25c38dc9a6e6ff2e5911b087064819a90809b1eec83176215bdd308b4c17a08c788227d622e43a7a86e515fdb32584ca97f2a10a57a60483cd0ea3db521d76b4bba290eb28bfdcf233412bcb939210e95fd0cfeb093ca1acf42a0c6907c28ad542cb46cf219c937d7736b6d98b8b85ee2b59c8123fce942965ea10d485e38c60d7443d86d335747b59abc28582e39eb3012d7bdf2c31b7608ad59337af6a3a1fac6965c1005de892137e3086b68bdcd462ee8c7a2a655479df813d93fa6a10b76ae2568c4044e03042d6d8f7bef7af37da8ae2b1d33b62bdca5e5be8454101d6fb5d72a2b81f9582668e260e3ff79bb64599b90cd885c4fc4ad98421d20c71afe9a57a94aeacc3f7ee07531b7681f4ca75f6837b9e671a4abd422af5dcba3fba9414e1ddcb1d0adfcd92c4ba5a58ee1de8d0da4fa392aeff25ac117b39776c5038ce8d5fe94a1d650240b5ede4f4d395c70b73eb07cabe414ba8a231bb367d34c1eff9773982ae93a98e2be9ff21a45ac5a4dbc9aa7485330dd38195cce324cdbad5c026e39f5e695fa70efaf6e6fca0f9ec1385e57f6bc40dda911a5b77f6d0568821a8a6ec655ebf33f3e2e53cb29b05a734a388e3edbb9930a3830cea79f338c8a364de00dde1933ffc7d0f448094948c0d107123ff76116c559e11254e5887a39460b2e9a3ba3a3bb25abc92239c139373ffd94396beffd8ee061115d72e9d6f39d13f349a44f16a29f5aec0130a6de4333b5a9d090c470c647d93b2cdb21cb78ad015255333c255d1de027dc1636f9a05e331d8f34fef84c2a291f211524e11f78bd3a713adae71e347a14e4e2d16a74f64ee8bedce6ff77bff52ba12f85955d519d206f81852fb2fa87ad4df853e73ddc1a8b0a40971d91a78019fad1cdced7bfeaee5ef0b1823d134ba51adbbc05ce018cce8232c78038261186c9ab84289d73b44c1729f0538a624ac6c6056a126742ae447985989cc9cfaa46f12f4674b7656401c6065f24f092f0f91d9a44c00dbe232722943cba31381619ba558d8d113e146e59e5822d4f1d882b0d94f860383c19169492d90ce7362c5f7b1d0067855745dc2d6a93c2f5fa592ede93a1c29e9643794ae79c62efd2360bf787decc47174803bcd4be31f03237542eaa73dfe685e0c78e31d921e3d17200453bcc1e23dbd03c75b5add1593019a2da857ec071ed01097a45d873292b65312fd37d3913bfe10b283dcd6c312f280468588efdcd07480ec51b65a7cf10b63b98e749a1f51a9deb38f719c359475d0efbd96edb73c1f905ce514b72a9e0aac27a1e6894dbcc963ea4d266c2df06755eb0161c3b575df060202bd47a86a615b29a022459b9daeac92db42e7b5b59b1b48cad798421521cbc5506e3973e5d612335f937a0d26be8191dc89eada9e09675e3c9e45eb57f960b1aaab33b3ee4c4f798030d8a7ab29adf7c8096083b0589e7793b6773a1cde584a7d6fdae0b36c900be02103c08dc764157541b9c2ac0c68e1530c0afad4e2977fb2dfb839be1549c39a714bd15f1a47af331d594578faa944a1675034e1160199855a33cc1ba416715b45c625d95e05aadc95c7b0284177661d6b1c06cd969b1abfcae83a41a5a54ef9a13f79ade69ad320130b2c5bf488241dfe0f9f038281d1027ef65fd82567e2410ba8e4420fc6a40993859b713f59fa55b88dd9b1aa5550b9bd1de72c422168e45ab699cf47e6fe1a55b97750e4363aaede95225c465e519c4d1c022db63bc964a7c51441c307bad068920aa79f28c0ee1ff05a25f3a7a4bd548c6d3cb67602167f281d279bbad251b0e4d9d79bb9b0cf22564dd28f71465051d5fd7d54c8b06bfa02ee915cfbb9b06fbfe30fc3fe69b02d22dea2bf3a8e5841e4cc430ea80d392bde1edb1ac735d8d4b3aa1141c522132174ce93f18491ddc3ebcca73ef15a14a7e0a5a83fd9d743c28a9271ae9100ab786faf8911f3b324a2c4c5d38800efe409308d7a4ed16965a3eaec5db7e78ff5369fa8d7b95e7df0b23148447cf9dce0dee04c5d0649dc2ce0938961735310392e13c6b553a76b0190c61851c5525732284ac9d8c25cd82d8f802fd9ad89a6f1d337870d4f3437b575d2aa82b39dc5af49fee6cb3bf9eec23983b077fea6f85f525e0133d21feccf8893301554c7caa7786cac2488def4ca29817dd491a27863da359efc2d9dbd9099584e3b32c459d215bdf3fc7f214c8837068b98999d9288043d17105c214b28e9e3a4ba22f65efd2b3a499c24501617431c83d6ab6ce4ac7f1735173ccc72e10b87a2f761ba4652ecc91ff840e84c9a3e469b2445b585118ce2fc84018957471da33dff01ba7222ae38fd77ee2769f4dd6471d23b6953fcef04047011ce83481edca901a77b82004108fec21f69929a49f7aa42edc09a433012c2635fa0cf365facaf2d78e5ae55ff53ed24bafd8301c941ee5ac82b6fc34f2f185f73dc1ba315cac1d57ffb8247304de46ea723544bc1a22e9f0ad8bbc3bee901684d0dfc6db9995cd6dee0e8040737a111fa762980552305706e4e1c8234521e5679d998b2e811adbff5fa87d31a7304e5e22cb8134910a932716d733868381a395ad0be9aa4393442d46302394d187edb1817f2b3baf38a44e2e2e57eed86603d44c90e6aa4b0583a4dad8364d49c3fd1d20f1e22c5e55f3db0118a68a83a9baf6986389d703bc4f0ecf62180147b74587fba3ac60701b301fd6b6a9f448ddbbcb17c7fabd9aaa87f7a49a37fdb0ee01f3847a658fcc8edeac6c98ea475109bef46b0475585159ee83448d44223d6bb013c37e492c1f11e5ebf799127c5afddff186d2226c58e14775ab81079f3ddaa6631dd42be8e022879bd0ef1b9e7d9259ecd2413077c0ae6aa98e7b899a30b4608b22939dc0042facf29ee1a1617ceecf5b86577ba466d74cac3c68045cdfe2ae1b35206273318eb5b499ceb5a0aa180541a19e22de5f4935dd0371dbc374e0355334892f71d55b132e8ccc254984f4c50fb04e77a47eb09df0cac8a5eeb99aae81b389438eb2185eadcc5115d9972986d6f909fb77b132192010ae39f259c361ad0b60f70a4fcd45e8e7f7f26be2c8cd17acae223a9acbbd5f75b6896da8d29ff0dc794c3c75c8054ec5ff5229711251cebaa28b2e09ebf4ea50d1b7b6d9408dbd7934b859b213ae49eba5a61241f5abc8b937e0236fef02018329b405fc227cc268161008b376050e0aeb5ff7ef74dbb34b526609b3803cff4400e32c1e69b44075fbe5dff274dd46a332ae9ac666ea6a882609889b07073b4d8441a6a05f3a6f33c6740fb35c73df63389d075e55e9ebdcff61cf2f4ed6a57cce41ca7ef1027776e65a3d013939d358bfadba538b751632fb54b90792c8f13d0d0ca8b3a6046c724843c9d4c5c782d292fbeb009f024c2b3eb7c4a99e17be464992bd09d587b9a27a3e8c82446930075434bd73fd690eb8f50b4aad83ea8c190b9cc3e3d07a4e86c7e9d1734f09eb8ddd9551c3acb6dc91b3238732096ce016fc3cabfd7e2f82c09cded983fdb6f5f2f75c4b5084372621030bbc0601127dbc03a6edc9878da77c55a8503e9ffee8b82d2e0cd3a7fd848a52c3baa34b7db99832e910d5e168503da0d22298823ca9882e483435dd5e2f54eb444739d10821d3f754ec06767abdd8d14218aa80e30ec46ff09ca47040b1415632cce0fac22f606ad7cad1f4b8f7b008e841e1a6eab784885cbf5cc8ddd4b8b76e2aeb6be2c84ed259ee6ec406a7a9c0cb68e8b49567e2ee7e899782f19ac3edecba912161f3eae6ffcbddbeaa377c9db1e9435f52a17d0bea3cd51f272957c5588dd5b8116ca1d317a9adb9509d97d876e0a5b0a277484e5511c8a8e02a9d0e7c5882014fd4b423bc4efc623e6a65d541d59f80b739312cc5d3c57445288cbc14800b9d1dd7a43ce9a60eb2314297280d4b794bea0a65ae6f89b686af3a45ae80431bfbff749f319ac6ef63a8ca0dd69f4972b88a33b8ea6c5a3337b02302b8dedc1e8d7c8d7b4fe51184c39ad7540d35065ae82af3c78a09a6e1b24f23f5b8f4a207bc8266287865fcbf1132a8c7615ee642f5f8cd1ab062b74fadb7f44a26129bc22ea62eb877b47b19111943c0ae87509fb8b2860afd7d1045492e9ecdb359667fffffe2fc34851ee8c1f2356137ed90071500d53c77ee4e21b79a8736de6cd1382a04cf6fbec6693dd7869e1fa20259c70f9b7a2c4f8d7b2512cf8388fc918e836eb1ef8454e718c7cd155272e0c8512e49841267a01eccedfebe59a92da9eb73a74f0d72d3e9dfb95d3de792cb48a6d464cd252bd8fa6da367c0ea47a272aacf63c7f305f272535a20d536023f70039225e77d5234935e6396403a8d215dc152ef98913ff58659c862ca70cfd19252d9d5837f74c79b35a5cbf9bbda6fc94b077d55d6f77e77d33e6f59cb799e19334206954a93567539a4bca5cd0b9b1c0221b0bf910ff3d148a8b80de5a52c58ab2dfec82e5d00bbea4877407e3f14e5c131a7da868d5fd97396b006f7601fcc03e762feb442ecc1298f2983338b9404de9ad94461301442c042daaf5a801f104e8812d19947cc7e23320bac4f557dccedc5a9d7ea4c763dfc3f3bba795454658a4318d6a4cdf2de7e9bc967d9305fab6972804d7f09577bec7b88262af75b06ed4ac658bc096d10beeed07685bcfb591e5ef5d16ef843729816f40568c2be83185b71db10315b143b0c3a5b72347e880214d20a9ba10e738fc0a1f0b61fcf06ed520a28d9ce05c95bde1d8b473cd4619deff7bd27bc6e7d99f7e71e80e3e7bb4286e177cb8566f82e59dda9af6a09e1352f317b348c3e1d54ad4d86a3a39ad"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b6c5e048068db00ae74086738aa8c437e322230bdd35ea47b741b40a95c9b92008706bb35e5e3fcb054c1c3b079d9172ca8e9804ac1d25a94ea7a47d493a66f11a2db926dfacef970a2bae26d2e319a110c3797345b5f7ceddcce5ca6783fd2d7c99673455dca882cbdbad57a32fbc2d94301b7408dfec9112dffb28e735589f6e7a59da4061f5cf"}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000180), 0x4080)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 3, 6, 1, 1, 1, 11, 3, 3, 2, 3]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)
executing program 0:
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050e"], 0x0)
executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010020000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56}, 0x28)
executing program 3:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784ff", 0x16}], 0x1}, 0x800)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
write(r4, &(0x7f0000000500)="08021100950108021100ffff80f3", 0xe)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0x8f141000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={{r0}, 0x9, 0x0, 0x31c0})
executing program 1:
unshare(0x22020600)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)
executing program 4:
unshare(0x400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)

program crashed: INFO: task hung in linkwatch_event
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <11>
bisect: split chunk #0 of len 11 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 3, 3, 2, 3]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
write(r4, &(0x7f0000000500)="08021100950108021100ffff80f3", 0xe)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0x8f141000)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={{r0}, 0x9, 0x0, 0x31c0})
executing program 1:
unshare(0x22020600)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)
executing program 4:
unshare(0x400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 3, 6, 1, 1, 1]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)
executing program 0:
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050e"], 0x0)
executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010020000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56}, 0x28)
executing program 3:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784ff", 0x16}], 0x1}, 0x800)

program crashed: INFO: task hung in inet_rtm_newaddr
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <6>
bisect: split chunk #0 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1]
detailed listing:
executing program 0:
syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050e"], 0x0)
executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010020000000000000003c0000003c000000020000000000000002000084ff"], 0x0, 0x56}, 0x28)
executing program 3:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784ff", 0x16}], 0x1}, 0x800)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 3, 6]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: INFO: task hung in addrconf_dad_work
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <3>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-setsockopt$inet6_tcp_int-sendto$inet6-setsockopt$inet6_tcp_TCP_CONGESTION-shutdown
detailed listing:
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 3]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)

program did not crash
bisect: split chunks (needed=true): <2>, <1>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6]
detailed listing:
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002c00128009000100626f6e64000000001c00028005000100060000000800030000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 6]
detailed listing:
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: no output from test machine
bisect: the chunk can be dropped
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunks (needed=true): <1>, <1, final>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: no output from test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: INFO: task hung in netdev_work_proc
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: INFO: task hung in linkwatch_event
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6]
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: INFO: task hung in addrconf_dad_work
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6]
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)
shutdown(r0, 0x1)

program crashed: INFO: task hung in addrconf_dad_work
minimized 8 calls -> 3 calls
minimizing program #1 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3)

program crashed: no output from test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: no output from test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: INFO: task hung in addrconf_dad_work
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: INFO: task hung in addrconf_dad_work
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
executing program 0:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
minimized 6 calls -> 2 calls
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_udp-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: INFO: task hung in inet6_rtm_newaddr
bisect: concatenation succeeded
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_udp-socket$inet6_tcp
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_udp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: INFO: task hung in inet_rtm_newaddr
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000500)='j@', 0x2, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: no output from test machine
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: INFO: task hung in netdev_work_proc
simplifying C reproducer
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: INFO: task hung in addrconf_dad_work
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
program crashed: no output from test machine
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
validation run: crashed=false
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: no output from test machine
validation run: crashed=true
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
validation run: crashed=false
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
validation run: crashed=false
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: no output from test machine
validation run: crashed=true
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
validation run: crashed=false
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program did not crash
validation run: crashed=false
testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-socket$inet6_tcp-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)

program crashed: INFO: task hung in addrconf_dad_work
validation run: crashed=true
reproducing took 6h49m47.74814781s
repro crashed as (corrupted=false):
INFO: task kworker/u8:9:1401 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:24584 pid:1401  tgid:1401  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/u8:12:6070 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:12   state:D stack:26568 pid:6070  tgid:6070  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 linkwatch_event+0xe/0x60 net/core/link_watch.c:313
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:1/10: 3, last CPU#0:
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888053c60330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:0/12: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88807ea50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff88807ea50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:1/13: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880278a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff8880278a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/1:0/25: 3, last CPU#1:
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/1:1/30: 3, last CPU#1:
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c79440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
locks held by khungtaskd/32: 1, last CPU#0:
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:3/49: 2, last CPU#0:
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:4/61: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888069290800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff888069290800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:6/137: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88804e7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff88804e7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:8/1272: 3, last CPU#1:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888033957258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834
locks held by kworker/u8:9/1401: 3, on CPU#1:
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230
locks held by kworker/0:2/1640: 4, on CPU#0:
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c7d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
 #3: ffff888053c634b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
locks held by kworker/0:3/2287: 3, last CPU#0:
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1532
locks held by kworker/u8:10/2346: 4, on CPU#1:
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880329a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by kworker/u8:11/2359: 4, last CPU#0:
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c79440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff888053c61700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by udevd/4985: 2, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
locks held by dhcpcd/5279: 1, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by dhcpcd/5280: 1, last CPU#1:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by getty/5371: 2, on CPU#0:
 #0: ffff8880291e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-execprog/5625: 2, last CPU#0:
 #0: ffff888079430f80 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:619 [inline]
 #0: ffff888079430f80 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x393/0x15b0 kernel/sched/fair.c:4397
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 mm/pgtable-generic.c:290
locks held by kworker/0:4/5699: 2, last CPU#0:
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/1:4/5758: 4, last CPU#1:
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c7d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678
 #3: ffff888053c634b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679
locks held by syz-executor/5921: 2, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 mm/page_owner.c:301
locks held by syz-executor/5934: 1, last CPU#0:
 #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline]
 #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587
locks held by kworker/0:5/6068: 4, on CPU#0:
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880329a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
 #3: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
locks held by kworker/1:6/6069: 3, last CPU#1:
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880353e1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:12/6070: 3, on CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
locks held by kworker/0:6/6072: 3, on CPU#0:
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
locks held by kworker/1:7/6073: 3, last CPU#1:
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888076529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
locks held by kworker/0:7/6074: 4, last CPU#0:
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888076529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678
 #3: ffff8880353e34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679
locks held by kworker/1:8/6076: 3, last CPU#1:
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888053c60d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:14/6077: 4, on CPU#1:
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888035195440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff888053c60d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by syz-executor/6078: 3, last CPU#0:
 #0: ffff88807d9c76c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:310
 #1: ffff888020ff5900 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70 include/linux/mmap_lock.h:619
 #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by kworker/u8:15/6079: 4, on CPU#0:
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88803518d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff8880353e1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by dhcpcd/6080: 2, last CPU#0:
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline]
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sockopt_lock_sock net/core/sock.c:1154 [inline]
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f20 net/core/sock.c:1312
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by kworker/u8:16/6081: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802aec8258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834
locks held by udevd/6082: 2, last CPU#1:
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: epoll_mutex_lock fs/eventpoll.c:2554 [inline]
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: ep_ctl_lock fs/eventpoll.c:2589 [inline]
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: do_epoll_ctl_file+0x3ef/0xee0 fs/eventpoll.c:2680
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:222 [inline]
RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:233 [inline]
RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline]
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4923 [inline]
RIP: 0010:__lock_acquire+0x5b3/0x2de0 kernel/locking/lockdep.c:5238
Code: c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 25 ff 1f 00 00 <48> 0f a3 05 f5 f5 f7 12 73 10 48 69 c0 c8 00 00 00 48 8d 88 d0 44
RSP: 0018:ffffc90000a17c58 EFLAGS: 00000002
RAX: 0000000000000007 RBX: ffff88801e298c20 RCX: 0000000000000004
RDX: 0000000000000003 RSI: 0000000000000003 RDI: 4100000000000000
RBP: ffff88801e298c50 R08: ffffffff8177f1df R09: 0000000000000000
R10: ffffc90000a17f38 R11: ffffffff81b2a310 R12: 0000000000000003
R13: 0000000000000000 R14: ffff88801e298000 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00001eb1350c9fff CR3: 0000000033e34000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6508 [inline]
 kfree+0x1c5/0x650 mm/slub.c:6801
 skb_kfree_head net/core/skbuff.c:1083 [inline]
 skb_free_head net/core/skbuff.c:1095 [inline]
 skb_release_data+0x82e/0xa80 net/core/skbuff.c:1122
 skb_release_all net/core/skbuff.c:1197 [inline]
 __kfree_skb+0x5d/0x210 net/core/skbuff.c:1211
 nft_synproxy_eval_v6+0x36a/0x4e0 net/netfilter/nft_synproxy.c:-1
 nft_synproxy_do_eval+0x3ff/0x5d0 net/netfilter/nft_synproxy.c:146
 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
 nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285
 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323
 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:545
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325
 __netif_receive_skb_one_core net/core/dev.c:6297 [inline]
 __netif_receive_skb net/core/dev.c:6410 [inline]
 process_backlog+0x795/0x18b0 net/core/dev.c:6761
 __napi_poll+0xaa/0x330 net/core/dev.c:7830
 napi_poll net/core/dev.c:7893 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:8050
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_call_function_single arch/x86/kernel/smp.c:267 [inline]
 sysvec_call_function_single+0xa3/0xc0 arch/x86/kernel/smp.c:267
 </IRQ>
 <TASK>
 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:681
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:221
Code: f7 e8 cd 3f ba f5 f7 c3 00 02 00 00 74 05 e8 60 8d e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 04 3d ab f5 65 48 8b 05 4c e0 ab 07 48 85 c0 74 18 5b 41 5e e9
RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001
RDX: 0000000000000000 RSI: ffffffff8e416424 RDI: 0000000000000001
RBP: ffffc90000157e18 R08: ffffffff907a647f R09: 1ffffffff20f4c8f
R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: 0000000000000002
R13: ffff88801e298000 R14: ffffffff9ad442c0 R15: dffffc0000000000
 nbcon_emit_one kernel/printk/nbcon.c:1165 [inline]
 nbcon_kthread_func+0x6c4/0x880 kernel/printk/nbcon.c:1271
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:9:1401 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:24584 pid:1401  tgid:1401  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task kworker/u8:12:6070 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:12   state:D stack:26568 pid:6070  tgid:6070  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821
 linkwatch_event+0xe/0x60 net/core/link_watch.c:313
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:1/10: 3, last CPU#0:
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888053c60330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:0/12: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88807ea50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff88807ea50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:1/13: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880278a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff8880278a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/1:0/25: 3, last CPU#1:
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/1:1/30: 3, last CPU#1:
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c79440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
locks held by khungtaskd/32: 1, last CPU#0:
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:3/49: 2, last CPU#0:
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888031e6a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:4/61: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888069290800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff888069290800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:6/137: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90002587c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88804e7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline]
 #2: ffff88804e7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550
locks held by kworker/u8:8/1272: 3, last CPU#1:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900057efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888033957258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834
locks held by kworker/u8:9/1401: 3, on CPU#1:
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88803037e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90005bdfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 net/ipv6/addrconf.c:4230
locks held by kworker/0:2/1640: 4, on CPU#0:
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c7d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
 #3: ffff888053c634b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
locks held by kworker/0:3/2287: 3, last CPU#0:
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90007417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1532
locks held by kworker/u8:10/2346: 4, on CPU#1:
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033e03940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900076b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880329a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by kworker/u8:11/2359: 4, last CPU#0:
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033e07140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90007747c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c79440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff888053c61700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by udevd/4985: 2, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495
locks held by dhcpcd/5279: 1, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by dhcpcd/5280: 1, last CPU#1:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by getty/5371: 2, on CPU#0:
 #0: ffff8880291e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-execprog/5625: 2, last CPU#0:
 #0: ffff888079430f80 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:619 [inline]
 #0: ffff888079430f80 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x393/0x15b0 kernel/sched/fair.c:4397
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 mm/pgtable-generic.c:290
locks held by kworker/0:4/5699: 2, last CPU#0:
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888035f89540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/1:4/5758: 4, last CPU#1:
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a07d940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003377c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888032c7d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678
 #3: ffff888053c634b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679
locks held by syz-executor/5921: 2, last CPU#0:
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 mm/page_owner.c:301
locks held by syz-executor/5934: 1, last CPU#0:
 #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:650 [inline]
 #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3587
locks held by kworker/0:5/6068: 4, on CPU#0:
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807ce17940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900026c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880329a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
 #3: ffff8880353e0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632
locks held by kworker/1:6/6069: 3, last CPU#1:
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807f6a2940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900024ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff8880353e1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:12/6070: 3, on CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003417c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313
locks held by kworker/0:6/6072: 3, on CPU#0:
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003487c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
locks held by kworker/1:7/6073: 3, last CPU#1:
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900032a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888076529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598
locks held by kworker/0:7/6074: 4, last CPU#0:
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88807e47fd40 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888076529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678
 #3: ffff8880353e34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679
locks held by kworker/1:8/6076: 3, last CPU#1:
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88805a052d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888053c60d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:822
locks held by kworker/u8:14/6077: 4, on CPU#1:
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88802a105940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff888035195440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff888053c60d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by syz-executor/6078: 3, last CPU#0:
 #0: ffff88807d9c76c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 mm/mmap_lock.c:310
 #1: ffff888020ff5900 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70 include/linux/mmap_lock.h:619
 #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by kworker/u8:15/6079: 4, on CPU#0:
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88802a65b140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc900034f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88803518d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529
 #3: ffff8880353e1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530
locks held by dhcpcd/6080: 2, last CPU#0:
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline]
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sockopt_lock_sock net/core/sock.c:1154 [inline]
 #0: ffff88807ef0c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f20 net/core/sock.c:1312
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305
locks held by kworker/u8:16/6081: 3, last CPU#0:
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc90003507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88802aec8258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 drivers/net/netdevsim/dev.c:834
locks held by udevd/6082: 2, last CPU#1:
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: epoll_mutex_lock fs/eventpoll.c:2554 [inline]
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: ep_ctl_lock fs/eventpoll.c:2589 [inline]
 #0: ffff88818965b060 (&ep->mtx){+.+.}-{4:4}, at: do_epoll_ctl_file+0x3ef/0xee0 fs/eventpoll.c:2680
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:198 [inline]
 #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:305

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:222 [inline]
RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:233 [inline]
RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline]
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4923 [inline]
RIP: 0010:__lock_acquire+0x5b3/0x2de0 kernel/locking/lockdep.c:5238
Code: c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 25 ff 1f 00 00 <48> 0f a3 05 f5 f5 f7 12 73 10 48 69 c0 c8 00 00 00 48 8d 88 d0 44
RSP: 0018:ffffc90000a17c58 EFLAGS: 00000002
RAX: 0000000000000007 RBX: ffff88801e298c20 RCX: 0000000000000004
RDX: 0000000000000003 RSI: 0000000000000003 RDI: 4100000000000000
RBP: ffff88801e298c50 R08: ffffffff8177f1df R09: 0000000000000000
R10: ffffc90000a17f38 R11: ffffffff81b2a310 R12: 0000000000000003
R13: 0000000000000000 R14: ffff88801e298000 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00001eb1350c9fff CR3: 0000000033e34000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6508 [inline]
 kfree+0x1c5/0x650 mm/slub.c:6801
 skb_kfree_head net/core/skbuff.c:1083 [inline]
 skb_free_head net/core/skbuff.c:1095 [inline]
 skb_release_data+0x82e/0xa80 net/core/skbuff.c:1122
 skb_release_all net/core/skbuff.c:1197 [inline]
 __kfree_skb+0x5d/0x210 net/core/skbuff.c:1211
 nft_synproxy_eval_v6+0x36a/0x4e0 net/netfilter/nft_synproxy.c:-1
 nft_synproxy_do_eval+0x3ff/0x5d0 net/netfilter/nft_synproxy.c:146
 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
 nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285
 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323
 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:545
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325
 __netif_receive_skb_one_core net/core/dev.c:6297 [inline]
 __netif_receive_skb net/core/dev.c:6410 [inline]
 process_backlog+0x795/0x18b0 net/core/dev.c:6761
 __napi_poll+0xaa/0x330 net/core/dev.c:7830
 napi_poll net/core/dev.c:7893 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:8050
 handle_softirqs+0x226/0x860 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_call_function_single arch/x86/kernel/smp.c:267 [inline]
 sysvec_call_function_single+0xa3/0xc0 arch/x86/kernel/smp.c:267
 </IRQ>
 <TASK>
 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:681
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:221
Code: f7 e8 cd 3f ba f5 f7 c3 00 02 00 00 74 05 e8 60 8d e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 04 3d ab f5 65 48 8b 05 4c e0 ab 07 48 85 c0 74 18 5b 41 5e e9
RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001
RDX: 0000000000000000 RSI: ffffffff8e416424 RDI: 0000000000000001
RBP: ffffc90000157e18 R08: ffffffff907a647f R09: 1ffffffff20f4c8f
R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: 0000000000000002
R13: ffff88801e298000 R14: ffffffff9ad442c0 R15: dffffc0000000000
 nbcon_emit_one kernel/printk/nbcon.c:1165 [inline]
 nbcon_kthread_func+0x6c4/0x880 kernel/printk/nbcon.c:1271
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>