Extracting prog: 1h26m22.180795811s Minimizing prog: 56m9.68654649s Simplifying prog options: 0s Extracting C: 3m15.838141863s Simplifying C: 53m52.900794569s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-sendmsg$nl_route-socket-openat$cgroup_ro-close-socketpair$unix-bpf$PROG_LOAD-ioctl$SIOCSIFHWADDR-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-setsockopt$netlink_NETLINK_TX_RING-sendmsg$kcm-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x9e, 0x8, 0x0, 0x4, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x700, 0xe, 0x6}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@ipv6_deladdr={0x68, 0x15, 0x2, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0xb6, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xcd, 0x8, 0x80000000, 0x212}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x68}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5910fb597e0234899ea54c7b6c2", 0x11) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="19c2ffb432999792668f032082ae2d66a92c9418dce500224effd0f86661ba447e", 0x21}, {&(0x7f00000002c0)="1b74530ba58941a06b0256dc23a84c7a8f6454c8f07f03b50e59ee8c179e1138922d851669c37ea22faaceea60fc23ed703571720bcae6e06c8572554dff41e2d7867c7fc4fa75b4677d31475754aca917f3d5278188de29629373fb03ca37bc2374bbd2317b04a3d06d7b66d96a9eacbb6f1fc4298e83115164dc1dab500b1441d8c0160af50321edc5ed71c48a1efe85968d98", 0x94}, {&(0x7f0000000380)="8e87d28b2e1537d6ce73097f107e6f78fb64bbb31f01017104e2540f2a522f683b2d2608733c856fbbb4ac847a8134df5c53783d2e166dd84de4a10937cbe3e887917d8177aed3e1d4592d1fc267b2efc8c4", 0x52}], 0x3, &(0x7f0000001180)=[{0x28, 0x11, 0xffff, "783452c641aba688e277ed70c7407cd56c692e436d31b4"}, {0x1010, 0x10c, 0xfffffffc, "e3a92b6a06ef1e0976d3e35133c8defbd2b26ed5ce8c3f51a82bba5e7e39f744979e056b682cef435bb28e116775c4c5d168d6992b504a320411cb545a126c7fe1e6d7f33322482932439839cb8a9c09e6bf350ddf2d85fa953ea67182a8e7a11ec6daa8e5895807a71664dfd43e72ad990f699e6aa0908f605177de0d75559e03e7b696ceed8b438167d03955e050d7c85bf92ed28c854d63e5f2cf2cb91471a11ecbbff49f4a068519472ac397169f6f877f71d47dd4092d3ad8a687d553ab0ca1502c9f3e6dd104067ecf7146038d8276e3b1d51521b298fc52d5047bd526ce0b9b824e0b21c2391025f2bf814c1df56fc81123b287f94162011e332cd4373528ddf71b6be6ab847d79bde3e45518fe2d7b07ac0287fcc87aa4dc204dae791ceb746e8a0126d7e40ebabe7f00e725ab40ca99844411f066a9b25e09ced77f0a4fba442d47c59d3da99a0df4c614c35b058e246dc3879cf123c29ceed9e38a96fe5d4645725b0b11ff012514b252b58c7ec3fd9655beca79b2e04abf41c3e502e60fab8142260d0f244ced9375f287e55a3b6240e6e1616a02efae62b773c3d2cb2630eaf501411f9560f672fd2790d87b89696cb00e69cbaea8ca3b15fbf2bc1bd78b8616559520382fdcc8759b401cd02c6e2a24d4fa6999fcd05ef8198ebb98aeb980491ea0c2166ccbd068378845d00c0c87306031ec8c3f8e2eeda8559131f437cdd75f0b73c397e17b87a412654b96b645000defe34f6162447461d68fad015cdb0530a7be302c94a4e563702b13dafb14a8dbd71ba25b11d5f7353aebecec712267bbff602dea2e33763705c377816f45b0aa5391d3119d4d2118f76d876f95148cccfe70d475f665cdd4b53d04d32cd385c30336cb5d805e0bf6ea5492ea2b298599197c07c448c08407954dd9803bfccb742b1edb78a700fff4d46ebd4e6f85880f14a5033bba39ffc0598307d9065d70f0977fc606e29f5a9f4556b2236ff3c4b7b67f308e7d09aec2940226ba422c16a6b5e797173d511d149f27d367fa5cb66756613ad352b0aed0e1eab4c6804606968285b4e69985e5dad8a7118f01acd137e54b34b60325448c18dc11a3c9b4a2e18c454c691fb7ce33b0b4b57835f4b2d112f5621fd2a94702e44c725fd672fdb7c8a31005300f790c317cc6962806366a15e841951a9222152aa9b4fe0f23a960fc62614c1e5b08ad6c2da16f9cda2c5c2fd00b90f481a3391625e88e1b989b88947815b195441346f0a1b2735d2efa5da711f18adc804631a22a1f2c6f6f3b75ffc32f66cd17970411e4081dae82c169b2d5b9e86d6d14c350d9fde1bc320d25013768a02a941d895757e14e1f78b97b019681eb1a94f1102cc319afbac4b28e3168607a4ebecc94c57b12d13b845324b6d93385aab344a5faf96335a8e13d18d25850e936092472a2ad11e4b1764748b617e6ab5996ac75b253307bfbb1bb3b0293f3fff21821374833b49d29e0093701c575293195520f4f81e024a359c9ac3aabf2337dcbc2d6bd7cfa2ce020909d7ade10dcd6994602520189d31d59666757a128cfc3083a77a75b9eebcbe783b4d4c0fa42c7a6ff1b13b8c357b49ce81b407e316dd569e379c8c426456a21c84346c5a5a9557ba78472047bad870509d1784a6d025fd3b5801d8f16904ed72b3ad52cae5d99444e9dc7896577635f2d14fa85e656368e860c30d74992f548fe0b95d6ad5e05f769d3c75b2b0e21a53cbcb2cdf3014a268bdb64beae44d9405dcc0b392ca93bd3c561e19efc4dcd06f97e429152db86aaa71814b748d2bb30f051bdd5940a2235ca7df6aa8617422166dfc77c1ec84ab335f1cc64779f6fc06971bb32217008a1dbb6396fedf6ca4087bf1f99dcb27a4fa9f13622e8db8059c11f0e757e44e42b9ba4c172437b72e6b613232fc5a961bb741fa964918b80ef904cb28b582bf408945354b9ff68a06dc80ff9212919f996d9b0cfc831f94c676dfa10a39e04171d6bc8c63b23fcb767d890e657cad6b8cf87d901399aa4b4be701fbab9e0889582e9df29d18d26b4f737289d3778ccb9a2f1bbca69f902528fbb5ce50516dbd8d9c89c311965652a91d19383ab8743a3183e5a7479cf893c1b02e4cea457d08290582e0683eb1eb415b55c8f3a9ffac0d3d7d646eabcabcf8e70ab53fc7abf489a6df8f111990404c956f2892575bf9f40bf21d5d7f8a590fb9d68754968395d3cc361b5e5143264214e9ada1cad702ed435a1314b40287a1d643d99531f8665bef5a4eb9a5890bcbd7293785e5eb54d089e3e51d356f4f2ba2e6d2a09da1e400d302673d9e08d3c3b2a93dfa68b4b44163fdc8608562849aaa5c9d46e4a5bae4ca52931b0edd4531514a8a603d71bd0daf42944c167031d4804536ff633a06fffd2d9db8a0cb7fd1b26c8c1e289a490d0fa903bc8bd590d37ac0ce8977a4073b8bd04748ec0ae9f3aaafcdb1773ec44bc539160585ecf86f2d418582954ddbe4b9db15ef026568f46ed7a2f3ba7b7a4381075bd1d143af5df4f8b893e97383f0f719f60ac621f0afda36b313a52b04ecea79ecf3ba38f4d03d4ecc836847ab60813867d01e61a4acdb85035694ab360e9172820642aee72c1ed59d307c6e943f43617402e980e2f739ba7cfeb2ea5300dd6095b346c14c1ad0f2f680c6981ea188694e8d8eb99155999f6e949d225d275fffc8beb794f4da6ade5c6011793ed20cc784b73fe2069d069c562b121c5ab583edc4b1a8b6d2e1435221e2547bb476c7eb59b873ddaead35b278234a0945be31e7b3e6c158da68d67d954190e7dac24234f493a315dc6d547a52d11b074d64c688dcda5870d150d35bba0791b8b0ab08419cc845516365f83bb6f23ff0dad46249eeaf894da15ff65a7340fc33d3a8d183a464a43c8312d07edc3020a50db30cb3c0859afb4aec65a887048152b89176bd9b735a0ce201e9758974f792793f56288004c8a22354db186f58d39cc43b8171dab0b82df03271e7d93720287bd1acb7d02fcd9689da01fefa349ab77409e05c81af53871dd179f9954decb08c1a93a5c6be17d7b94b3c10f3f52822f6195d7b5e2a01ddd709b4187017472456823c1fdc48c9c793dce0e031882388683a0fc2a76a4aa472ba0a8ad807cda95c4e5aad089f27c2f94194186315d53e0a28c0a91551ef952c8d120467fdf655394eb01aa57a0637a076c9f1c14786d5fc17b759a3dbb7ada2229b5dcbe7795ec66fedac9db3487725f3bb2f2b2a3c36f0c7f200029f7b092f53bc8268abdb3530e341e530203a35100dd39f0843d427d09983540cac9074eef59c2369fe4345ae7dca8cc31160427c1f536f081eb2d387230a6c07826a3196923c7e0c19d44dd04542dd43abf4677bf53b3a8bb2bab41962eba2b29641be366400b5029f6fafa46e73cd504be848675b10467cfd9588210d530b75d52fbc8494c04f7788a05e21878bdf7190d8e8f9f5df5158fc75db5399f3b012c5d9accedd975ddee472768945aa9585ee2b86cf53acf11baeafec4ad4b7993a8748c92882d0f2bcf03822556a289957cce6d46f975b7e6489673537360644d1d56c1cd4a713102ce363d18b8ff57c1b4c928a8ef584bd3010633dc58e4b47651180e7246bb63342752381f522afa5e6c3e84571f5d141d40993b5f773183688e33616a264883670135b218ca722603e652d61d5b251563b0bb703e0b6cf67451862d3b8644b0a61381f8da7e97cf90b90d01b819cfcbfcf085da7e6a1c8e741f7e8877a4c74076aac67c8772626ac284d819caa9c0c97c983f218311b2c0f30aa48da5a40c0a9bb74900eb78725d3004e8743116fbd3f984b156499a309669039bed92b7beda8988914f1bd0041c3efd05c5386c0dc819279abf67069923c44e9754958394d324ef86f2bf6ee7a7e57526f020454a3c4f7d5232e3bb2d576c3699acdde23afdb85abadcdb76345e28d9bad0fe9b58744a8406bcc1b8b529ce655f1153489706cc50dc9bf7c203b53d69cd47a28b874194927b33daac5dbb507c66914d2940a494fca6eccf4b79dbdb08f2ae69d6c66598e06f957394400d63be602df9471101d4da45a7d63de536d1a9d9f98c7738376349d7f004599e97f8886a9ff7f4e1f656b9a3d9e8b389709177c2cf8955deb7c4b4ec448620a7a2358b8c2709246cf66960cd990960b97ff2090fcb4e9bdbfc8c87e481731c1f33d657a801de55dedb9497c88f5b9dc804d1294a13ace66a6695b434d2e5498a3046a219e82c78775df10f2195064e436e2783d21dc94788fba3fe470803959f9f053770ef396d4a41b5d983354b5c7925717ac5284b3bd74f8c80b870167ab2358a857487bed711366392ab6e501c620e88b01ecb068e18a8c0b64ea149433c965db1f55fd0d09ab2119814a0897d35f3381fe9ad8ac3e027ec2b6ff95f2fafc6f932c9bff8da08c933ce1d874d72ec01c12ce7081d5193e502da0d22ffbbf15c87e9b74b3f47db6d5eb681f7432f53fc04370cc2bf5409fe36eff403501a37f1ffc5d82df6d1d946b9fa66050ef846ab888862aa822e39d0a624d10ba476562ed079364a52934c81100d7fbe000bebafede359611aad20dacc1a7147fa782b3c2450b2c1b87326e1105b31bb4448b44db51ebce392ec42f4f63131a5a6b80f3679cc1078c2d55123b2edfe338176f2cfa4edaca205344043c5672fcccf7cf3e3290c6757e0091560d81ecfd4401b97f0338f4bacf4cba02a5efe521375ea3f275c1f04b34f9a623d9846a90e0f31ea210b83a115a51a0dea3063cbf85cb7d5a129d1cbc68fc5c09982a7074b70948dd89fb403c85b514f534d398bde3f039cba67203e3a51b5575f35df7605e502702fc555315ad6c68870ffd9e95ca3a0eba4796ac959eb00f89dfbdddbc44ecaf613f9f1734204bd367226288fd99a4f05aa6ae9b55bf193300daaeccba7488aac28d7a972c3c28bcaafcbe8fd84179ea2e33757835055fca376946ff35afa83e8bdb4e61f3b17962beb96fda0b7dbecebead94245c607ffe3ab54c3ca3b055f37014088985f139ed2ddaa966f724fa0a9c8264cee8bf7e310d5da8ef68b699881c50c7320143d4b70ab150cf0b51dca4bdd934c7878256c29923a80935862b95967aa2f3dcefbd795063bdf4faca3aed1ef597c73db83ef5cc2c3b3981755d6dc461beefa170267154d1a3b181ec622c9185e143bc29f6c87b3e6f9a8dcfaa211246b86ec44c96a5e18168480c0482199cee0bab4012b71799a08147a73d9d89423c36218531ccb28e5c96bd63bf4fe90f045c3b16c1c0d866a4144afdd4c8650c7d751f1d2ad847833e8b80ecb623ae634118ff4b10a9df828654cdf41b46b9ba71b441a43a55efbda65897244753174e7828d14160df1dde4e5fc03aeb0229873723becc8f441cf89cf26cf6fb15c8e077a77d3eaf25f20e3eb2a546f7d3a5096ac80ad093817bedcef4cd5f00395d4a515bf35d888642c800746c735fed21800fc4f2f0b6467601fc36c25391171efd233bba7ffa34dfa48f33a13d122967e76dc061f780fc4332129f37f689349b906538346db2117c8ed6bea0f58395d12fda8aac12f8d4097e6b1380d1ec73ac96d44703a3bde2ca7f65ec0938ff13343a55182d05a1c385ba9fed30dd72aae7abdf58f29a819dd65aa8dd1b747d082d62fa4498b0cbd6c60d3a3cd22efe0e841b8e8158c438704e4ae125fbef3ced369ac8943e9ca78930df8014ea882e19f0f1412e49d05449efcf7b7414dc10e6b446ed9f6"}, {0xc8, 0x115, 0x101, "cc025c2796dd5c244e7a759bcd18fa5d8466b1ed3a9575bc0eebcbe8af6c0e201e88ee30d00306dc8e524be3a7cf74ec53888b34fa4d6eb350c27ea7fea321e9bcf1424215370b4712b4e38ea72b994873305acc1bbb9e762aa5de63ad6271cc5ea5c2cb91165c1f990eaf207ee901140ec6797397842691c3ddfa5c9f2d23853aa5492022e69bb7d2d26644906fd720a1749d813e35127332e3d5ae6d363ec3239c22c55d544a78fb1e5c97ea63ad06f596acf0a62b"}, {0x48, 0x10e, 0xd9, "44e00b2b78451f47cd4baa1d92f10cac3ed45955ade51cfb32921f071567a14a663e45153cf12e150d7cc1825b75c2d2772a38b9d1"}, {0x70, 0x103, 0x8, "8a318a62ec2559aea547bc5222244e7ea3534efa4362d558373284663052e19196f5a59f45326ee57437aa2963d7aac839cc0874766201b7f4dbbe271c01e9d4d515a04a083e4c9736bf8156aec5b95d2e2c2f0a0a78dbd1e2dbb2"}], 0x11b8}, 0x8000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-setsockopt$IP6T_SO_SET_REPLACE-socket$nl_netfilter-write-sendmsg$NFT_BATCH-ioctl$F2FS_IOC_START_VOLATILE_WRITE-socket$kcm-bpf$BPF_PROG_WITH_BTFID_LOAD-pipe-splice-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000800)="d104e6b9e8cb92b5eef54da71d3c0314e247b9244b89ba90bf98d1087707f8bddbee493a043c55ad9dddd8c5b14f867a15625454858cf06f2a0eeaf53ca1496335e5bcdb0c9899436fd33f43333461d5646d7f156b4e3686257b3dc457f72a5150afee261df6023bcafbadd0f55e51224e0dc44139aa00dbdf29f8a5ee127996967c7defc8332818517c39fb8c6975", 0x8f) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000100000040000000160900010073797a30"], 0xc4}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a00000000000079113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-bpf$PROG_LOAD-sendmsg$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_BTF_LOAD-bpf$PROG_LOAD-socket$nl_generic-sendmsg$nl_generic-socket$packet-setsockopt$packet_int-setsockopt$packet_tx_ring-bpf$BPF_BTF_GET_NEXT_ID-bpf$PROG_LOAD-bpf$MAP_UPDATE_CONST_STR-openat$cgroup_ro-close-connect$unix-ioctl$F2FS_IOC_MOVE_RANGE-bpf$MAP_CREATE_RINGBUF-bpf$MAP_CREATE-openat$cgroup_ro-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$nl_route_sched-bpf$PROG_BIND_MAP-bpf$PROG_LOAD detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@restrict={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f0000000680)=""/241, 0x2d, 0xf1, 0x0, 0x2, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040012"], 0x76}}, 0xc000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000b00)='%ps \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r10) connect$unix(r10, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000b80)={r1, 0x512f00000000, 0x401, 0x5}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="ffffff000000000000000093dc5db58f45120607777df5686ad0f1dbdb032eb645c28c5b60bef5fabba3fe617df294665d26f8b765c91e58f2fdb0489bb6f5af68e92b1bd68964857026ed54cd37c0fdc3b391033433a169054b29da5421e81ece564e59e8c96cde8c32550a0b5e3939070000006ff727c55797b0898e960858a01ff06bd45b2337f8f3ddc48e5a7d1aa58433a073e7ad08afd8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000200"/28], 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(r10, &(0x7f00000011c0)='cgroup.controllers\x00', 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000d80)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)=@newtfilter={0x208, 0x2c, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xfff2, 0xd}, {0x10, 0xfff3}, {0x3, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xf1, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xca1}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x5}]}}, @filter_kind_options=@f_fw={{0x7}, {0x178, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x16c, 0x4, [@m_xt={0x70, 0x1f, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x3e, 0x6, "54f3e0c6e78a2b6bdcf8107cbf672b29433617912225394e781eb71bc4d97aa0f1c99cfed015c1ba162a9146b70fb6fcbd02df7bfed870741fce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_csum={0xf8, 0x0, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xa2d8, 0x1, 0x3, 0x80000001}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x8, 0xa06f, 0x1b}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffc92, 0x5, 0x0, 0x8}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb17e, 0x10000000, 0x10, 0x42d}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80008, 0x35, 0x10000000, 0x8, 0x6}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x7, 0x1, 0x4, 0x5}, 0x11}}]}, {0x22, 0x6, "ada6080d1c3f09984645fe4c6eeedab820004cdb9e2b95a6e4d9969fc290"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x6fe}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r14}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x2, 0x0, 0x1, 0x7, 0x4, 0x26, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x73}, @alu={0x7, 0x1, 0x2, 0x2, 0x5, 0xfffffffffffffffe, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x8, 0x98, &(0x7f00000005c0)=""/152, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, r4, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x10, 0x6, 0x2}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r9, r10, 0x1, r11, r12], 0x0, 0x10, 0x9, @void, @value}, 0x94) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_sock_diag-socket$inet6_sctp-shutdown-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$nl_netfilter-bpf$BPF_BTF_LOAD-bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO-bpf$BPF_RAW_TRACEPOINT_OPEN-socket-sendmsg$NFT_BATCH-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-bpf$PROG_LOAD-sendmsg$nl_xfrm-sendmsg$IPCTNL_MSG_CT_DELETE detailed listing: executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x16c0, 0x5e3, 0x8b, 0x2, 0x7, 'syz1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1, 0x80000, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c00"], 0x68}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_l2cap-socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY-connect$bt_l2cap-connect$bt_l2cap-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$kcm-sendmsg$inet-sendmsg$inet-socket-socket$inet6_udplite-ioctl$sock_SIOCGIFINDEX-ioctl$sock_inet6_SIOCSIFADDR-ioctl$sock_inet6_SIOCSIFADDR-setsockopt$inet6_mreq-getsockopt$inet6_mptcp_buf-syz_genetlink_get_family_id$nl80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_PMKSA-sendmsg$NL80211_CMD_DEL_PMKSA detailed listing: executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0xff87, 0x8, 0xa14, 0x97, 0x1, 0xff}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x7}, 0x8) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7}, 0xffffffffffffff56) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xf, 0x284794f1784834e6}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="3001fb90647586f4601659c5", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="3001fb90647586f4601659c5", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x11}, 0x9, r7}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x11}, 0x9, r7}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="07b9fc2b5b62db71ec6549c4a152b27331022e0c350fb14fa170b46f5d8c4af5ddfcf722576d5d5c916d5590bdcef9dcc8638657222863307e7e0102d5b5426705cd06c4517d69f1bef162c7a5aca53954a0104b9b29b9d710d259f34ca3538e6a4384d682ac354d34bbf80cf8b6cb29a34f6fc702af5199cf4bbc2b2c8706c0340ad9703e63c57b9371eba7a6c0e6a25cf78bdcd1d9271b00c2c65f2c766dacf2257b10f9bbd736b1d339d44f8f542806fca12d8a1bac9b659feec9a687712af321c380cf8c52a90fffe9c6b054c3d121ed9cc533049b2fa216562bca7815ab902f100a91bc30bcf49441a7ff4259", @ANYRES16=r8, @ANYBLOB="200027bd7000fcdbdf25350000000c009900420400003d0000000a00340002020202020200000a0006005050505050500000"], 0x38}, 0x1, 0x0, 0x0, 0x8085}, 0x40880) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="07b9fc2b5b62db71ec6549c4a152b27331022e0c350fb14fa170b46f5d8c4af5ddfcf722576d5d5c916d5590bdcef9dcc8638657222863307e7e0102d5b5426705cd06c4517d69f1bef162c7a5aca53954a0104b9b29b9d710d259f34ca3538e6a4384d682ac354d34bbf80cf8b6cb29a34f6fc702af5199cf4bbc2b2c8706c0340ad9703e63c57b9371eba7a6c0e6a25cf78bdcd1d9271b00c2c65f2c766dacf2257b10f9bbd736b1d339d44f8f542806fca12d8a1bac9b659feec9a687712af321c380cf8c52a90fffe9c6b054c3d121ed9cc533049b2fa216562bca7815ab902f100a91bc30bcf49441a7ff4259", @ANYRES16=r8, @ANYBLOB="200027bd7000fcdbdf25350000000c009900420400003d0000000a00340002020202020200000a0006005050505050500000"], 0x38}, 0x1, 0x0, 0x0, 0x8085}, 0x40880) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_sock_diag-socket$inet6_sctp-shutdown-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-socket$nl_netfilter-bpf$BPF_BTF_LOAD-bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO-bpf$BPF_RAW_TRACEPOINT_OPEN-socket-sendmsg$NFT_BATCH-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-bpf$PROG_LOAD-sendmsg$nl_xfrm-sendmsg$IPCTNL_MSG_CT_DELETE detailed listing: executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x16c0, 0x5e3, 0x8b, 0x2, 0x7, 'syz1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1, 0x80000, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c00"], 0x68}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_l2cap-socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY-connect$bt_l2cap-connect$bt_l2cap-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$kcm-sendmsg$inet-sendmsg$inet-socket-socket$inet6_udplite-ioctl$sock_SIOCGIFINDEX-ioctl$sock_inet6_SIOCSIFADDR-ioctl$sock_inet6_SIOCSIFADDR-setsockopt$inet6_mreq-getsockopt$inet6_mptcp_buf-syz_genetlink_get_family_id$nl80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_PMKSA-sendmsg$NL80211_CMD_DEL_PMKSA detailed listing: executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0xff87, 0x8, 0xa14, 0x97, 0x1, 0xff}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x7}, 0x8) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7}, 0xffffffffffffff56) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xf, 0x284794f1784834e6}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="3001fb90647586f4601659c5", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="3001fb90647586f4601659c5", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x11}, 0x9, r7}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x11}, 0x9, r7}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="07b9fc2b5b62db71ec6549c4a152b27331022e0c350fb14fa170b46f5d8c4af5ddfcf722576d5d5c916d5590bdcef9dcc8638657222863307e7e0102d5b5426705cd06c4517d69f1bef162c7a5aca53954a0104b9b29b9d710d259f34ca3538e6a4384d682ac354d34bbf80cf8b6cb29a34f6fc702af5199cf4bbc2b2c8706c0340ad9703e63c57b9371eba7a6c0e6a25cf78bdcd1d9271b00c2c65f2c766dacf2257b10f9bbd736b1d339d44f8f542806fca12d8a1bac9b659feec9a687712af321c380cf8c52a90fffe9c6b054c3d121ed9cc533049b2fa216562bca7815ab902f100a91bc30bcf49441a7ff4259", @ANYRES16=r8, @ANYBLOB="200027bd7000fcdbdf25350000000c009900420400003d0000000a00340002020202020200000a0006005050505050500000"], 0x38}, 0x1, 0x0, 0x0, 0x8085}, 0x40880) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="07b9fc2b5b62db71ec6549c4a152b27331022e0c350fb14fa170b46f5d8c4af5ddfcf722576d5d5c916d5590bdcef9dcc8638657222863307e7e0102d5b5426705cd06c4517d69f1bef162c7a5aca53954a0104b9b29b9d710d259f34ca3538e6a4384d682ac354d34bbf80cf8b6cb29a34f6fc702af5199cf4bbc2b2c8706c0340ad9703e63c57b9371eba7a6c0e6a25cf78bdcd1d9271b00c2c65f2c766dacf2257b10f9bbd736b1d339d44f8f542806fca12d8a1bac9b659feec9a687712af321c380cf8c52a90fffe9c6b054c3d121ed9cc533049b2fa216562bca7815ab902f100a91bc30bcf49441a7ff4259", @ANYRES16=r8, @ANYBLOB="200027bd7000fcdbdf25350000000c009900420400003d0000000a00340002020202020200000a0006005050505050500000"], 0x38}, 0x1, 0x0, 0x0, 0x8085}, 0x40880) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$PNPIPE_IFINDEX-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-socket$kcm-close-socket$kcm-sendmsg$inet-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNDEL-openat$cgroup_ro-socket$nl_generic-setsockopt$SO_TIMESTAMPING-writev-socket$key-ioctl$sock_inet_SIOCSIFPFLAGS-ioctl-mmap-bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$PROG_LOAD-bpf$BPF_PROG_DETACH-bpf$BPF_PROG_DETACH-bpf$PROG_LOAD_XDP detailed listing: executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r1, r1, 0xc, 0x3, &(0x7f0000000140)="cb1578", 0x9, 0x1, 0x458, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b27, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8fce, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x42, &(0x7f00000000c0)=""/66, 0x41000, 0x43, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$PNPIPE_IFINDEX-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-socket$kcm-close-socket$kcm-sendmsg$inet-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNDEL-openat$cgroup_ro-socket$nl_generic-setsockopt$SO_TIMESTAMPING-writev-socket$key-ioctl$sock_inet_SIOCSIFPFLAGS-ioctl-mmap-bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$PROG_LOAD-bpf$BPF_PROG_DETACH-bpf$BPF_PROG_DETACH-bpf$PROG_LOAD_XDP detailed listing: executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r1, r1, 0xc, 0x3, &(0x7f0000000140)="cb1578", 0x9, 0x1, 0x458, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b27, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8fce, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x42, &(0x7f00000000c0)=""/66, 0x41000, 0x43, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_mgmt-syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-bind$bt_l2cap-sendmsg$NLBL_MGMT_C_ADDDEF-sendmsg$NLBL_MGMT_C_LISTDEF-bpf$MAP_CREATE_TAIL_CALL-syz_genetlink_get_family_id$nbd-socketpair$nbd-socketpair$nbd-socket-setsockopt$WPAN_SECURITY_LEVEL-getsockopt$WPAN_SECURITY_LEVEL-socketpair$nbd-socketpair$nbd-openat$cgroup_ro-ioctl$FITRIM-socket-socket-getsockname$packet-socketpair$nbd-sendmsg$NBD_CMD_STATUS-bpf$PROG_LOAD detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000600000000000000090c33383249824d4e9d6d544d612f28"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r12, 0x40305829, 0x0) r13 = socket(0x2b, 0x1, 0x3) r14 = socket(0x2a, 0x2, 0x0) getsockname$packet(r14, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r6, 0xd19e2fd8620e18ff, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xac}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_mgmt-syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-bind$bt_l2cap-sendmsg$NLBL_MGMT_C_ADDDEF-sendmsg$NLBL_MGMT_C_LISTDEF-bpf$MAP_CREATE_TAIL_CALL-syz_genetlink_get_family_id$nbd-socketpair$nbd-socketpair$nbd-socket-setsockopt$WPAN_SECURITY_LEVEL-getsockopt$WPAN_SECURITY_LEVEL-socketpair$nbd-socketpair$nbd-openat$cgroup_ro-ioctl$FITRIM-socket-socket-getsockname$packet-socketpair$nbd-sendmsg$NBD_CMD_STATUS-bpf$PROG_LOAD detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000600000000000000090c33383249824d4e9d6d544d612f28"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r12, 0x40305829, 0x0) r13 = socket(0x2b, 0x1, 0x3) r14 = socket(0x2a, 0x2, 0x0) getsockname$packet(r14, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r6, 0xd19e2fd8620e18ff, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xac}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPGETCONNINFO-socket$rds-ioctl$BTRFS_IOC_ADD_DEV-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x9, 0x49, 0x46d, 0xa0e, 0x0, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x8, 0x2, 0x4a, 0x8004, "932bdc8a7a15dafabcdb88ec3f1c158f22c392d896b87286760a35883585f8dd97c02505a1c9125c2b3257a162c54809cecd045f8a37294438106d73fe7270f7213b3890408bfdcde53c8ffa7831633657d10ba545a4c6a24ab246380ba4cd6200379a913f0294794bcba50a4638bd8a0065edcda507864901aa3823c8d4276c"}) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000200)={{r2}, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc4}]}}}]}, 0x38}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$l2tp6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-syz_init_net_socket$bt_rfcomm-connect$bt_rfcomm-syz_init_net_socket$bt_rfcomm-bpf$PROG_LOAD-socket$inet_mptcp-socket-shutdown-bind$unix-sendmmsg$unix-bind$inet-setsockopt$inet_tcp_TCP_CONGESTION-setsockopt$sock_int-syz_init_net_socket$802154_raw-sendmsg$802154_raw-socket$inet_mptcp-bind$inet-connect$inet-writev-shutdown-recvmmsg-connect$bt_rfcomm detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x1, 0x2, 0x0) shutdown(r4, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0), 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)="cc56a3d11ba3b56186397227d3b67479be0f2ec525cb912bc77bfdc9db3223435b3d1b066436f184f37098761375f02b9ce430b60e8cc8a07f807be5f50e64331da847f19d29e64aaed3b2e708243bb11a6ebe8d396e0f69b1c46be9e3ce9d8cc071bd9e90806bf35b13e98a2d2f8380d357fcdd5283ce1c96a88a84d46bc75b", 0x80}, 0x1, 0x0, 0x0, 0x40018}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {0x0}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNDEL detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) program crashed: INFO: task hung in uevent_show single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD-syz_init_net_socket$bt_hidp detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) program crashed: INFO: task hung in uevent_show testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program crashed: INFO: task hung in uevent_show testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0xfffffffffffffd59, &(0x7f0000000100)="83742afce6", 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0xc, 0x0, &(0x7f0000000100), 0x9, 0x1, 0x459, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in hidp_session_remove a never seen crash title: INFO: task hung in hidp_session_remove, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in hidp_session_remove a never seen crash title: INFO: task hung in hidp_session_remove, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in hidp_session_remove a never seen crash title: INFO: task hung in hidp_session_remove, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_init_net_socket$bt_hidp-ioctl$sock_bt_hidp_HIDPCONNADD program crashed: INFO: task hung in uevent_show reproducing took 3h19m40.606298848s repro crashed as (corrupted=false): INFO: task udevd:5830 blocked for more than 143 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:25528 pid:5830 tgid:5830 ppid:5208 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 device_lock include/linux/device.h:1030 [inline] uevent_show+0x17d/0x340 drivers/base/core.c:2729 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230 new_sync_read fs/read_write.c:484 [inline] vfs_read+0x975/0xb40 fs/read_write.c:565 ksys_read+0x18f/0x2b0 fs/read_write.c:708 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb46e716b6a RSP: 002b:00007ffdcce15e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000559ae5f325d0 RCX: 00007fb46e716b6a RDX: 0000000000001000 RSI: 0000559ae5f0b620 RDI: 0000000000000008 RBP: 0000559ae5f325d0 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffdcce162e8 R15: 000000000000000a INFO: task khidpd_04590009:5835 blocked for more than 143 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:khidpd_04590009 state:D stack:25816 pid:5835 tgid:5835 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_timeout+0xb0/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xa47/0xc60 kernel/workqueue.c:4244 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4364 hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169 l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1733 hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor273:6633 blocked for more than 144 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor273 state:D stack:27352 pid:6633 tgid:6632 ppid:5827 task_flags:0x400140 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 l2cap_chan_connect+0xff/0xeb0 net/bluetooth/l2cap_core.c:6919 l2cap_sock_connect+0x620/0x950 net/bluetooth/l2cap_sock.c:256 __sys_connect_file net/socket.c:2045 [inline] __sys_connect+0x288/0x2d0 net/socket.c:2064 __do_sys_connect net/socket.c:2070 [inline] __se_sys_connect net/socket.c:2067 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2067 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f258d9cbb19 RSP: 002b:00007f258d17c218 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007f258da4e3e8 RCX: 00007f258d9cbb19 RDX: 000000000000000e RSI: 0000400000000080 RDI: 0000000000000004 RBP: 00007f258da4e3e0 R08: 000000000000001f R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000140 R13: 0000400000000100 R14: 0000400000000150 R15: 0000400000000144 Showing all locks held in the system: 8 locks held by kworker/1:0/25: 1 lock held by khungtaskd/30: #0: ffffffff8eb38fa0 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] , at: rcu_read_lock include/linux/rcupdate.h:849 [inline] , at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746 2 locks held by getty/5592: #0: ffff888035b720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 ( &ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211 4 locks held by udevd/5830: #0: ffff8880348532f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff888034db8c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff8880329331e8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88807be61a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline] (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729 2 locks held by khidpd_04590009/5835: #0: ffff8880334d0078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1727 #1: ffffffff90063710 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165 1 lock held by syz-executor273/6633: #0: ffff8880334d0078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xff/0xeb0 net/bluetooth/l2cap_core.c:6919 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline] watchdog+0x1058/0x10a0 kernel/hung_task.c:399 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events hidp_session_dev_work RIP: 0010:io_serial_out+0x7e/0xc0 drivers/tty/serial/8250/8250_port.c:416 Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 fc 1a a5 fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7 RSP: 0018:ffffc900001f6bd0 EFLAGS: 00000002 RAX: 000000000000005b RBX: ffffffff9a9960a0 RCX: 0000000000000000 RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 RBP: 0000000000000000 R08: ffffffff8583de0b R09: 1ffff11004a1e046 R10: dffffc0000000000 R11: ffffffff8583ddc0 R12: dffffc0000000000 R13: 000000000000005b R14: 000000000000005b R15: 00000000000003f8 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdcce16498 CR3: 000000003012c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: serial8250_console_write+0x1430/0x1e00 drivers/tty/serial/8250/8250_port.c:3465 console_emit_next_record kernel/printk/printk.c:3122 [inline] console_flush_all+0x869/0xeb0 kernel/printk/printk.c:3210 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline] console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3309 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2432 dev_vprintk_emit+0x341/0x400 drivers/base/core.c:4890 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4901 _dev_warn+0x122/0x170 drivers/base/core.c:4957 hid_parser_main+0x812/0xc00 drivers/hid/hid-core.c:660 hid_open_report+0xbd8/0x1580 drivers/hid/hid-core.c:1324 hid_parse include/linux/hid.h:1124 [inline] hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:66 __hid_device_probe drivers/hid/hid-core.c:2713 [inline] hid_device_probe+0x3bf/0x710 drivers/hid/hid-core.c:2750 really_probe+0x2b9/0xad0 drivers/base/dd.c:658 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800 driver_probe_device+0x50/0x430 drivers/base/dd.c:830 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:462 __device_attach+0x333/0x520 drivers/base/dd.c:1030 bus_probe_device+0x189/0x260 drivers/base/bus.c:537 device_add+0x856/0xbf0 drivers/base/core.c:3665 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2896 hidp_session_dev_add net/bluetooth/hidp/core.c:856 [inline] hidp_session_dev_work+0x46/0x160 net/bluetooth/hidp/core.c:895 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd30 kernel/workqueue.c:3400 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.181 msecs final repro crashed as (corrupted=false): INFO: task udevd:5830 blocked for more than 143 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:25528 pid:5830 tgid:5830 ppid:5208 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 device_lock include/linux/device.h:1030 [inline] uevent_show+0x17d/0x340 drivers/base/core.c:2729 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230 new_sync_read fs/read_write.c:484 [inline] vfs_read+0x975/0xb40 fs/read_write.c:565 ksys_read+0x18f/0x2b0 fs/read_write.c:708 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb46e716b6a RSP: 002b:00007ffdcce15e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000559ae5f325d0 RCX: 00007fb46e716b6a RDX: 0000000000001000 RSI: 0000559ae5f0b620 RDI: 0000000000000008 RBP: 0000559ae5f325d0 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffdcce162e8 R15: 000000000000000a INFO: task khidpd_04590009:5835 blocked for more than 143 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:khidpd_04590009 state:D stack:25816 pid:5835 tgid:5835 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_timeout+0xb0/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xa47/0xc60 kernel/workqueue.c:4244 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4364 hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169 l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1733 hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor273:6633 blocked for more than 144 seconds. Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor273 state:D stack:27352 pid:6633 tgid:6632 ppid:5827 task_flags:0x400140 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 l2cap_chan_connect+0xff/0xeb0 net/bluetooth/l2cap_core.c:6919 l2cap_sock_connect+0x620/0x950 net/bluetooth/l2cap_sock.c:256 __sys_connect_file net/socket.c:2045 [inline] __sys_connect+0x288/0x2d0 net/socket.c:2064 __do_sys_connect net/socket.c:2070 [inline] __se_sys_connect net/socket.c:2067 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2067 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f258d9cbb19 RSP: 002b:00007f258d17c218 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007f258da4e3e8 RCX: 00007f258d9cbb19 RDX: 000000000000000e RSI: 0000400000000080 RDI: 0000000000000004 RBP: 00007f258da4e3e0 R08: 000000000000001f R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000140 R13: 0000400000000100 R14: 0000400000000150 R15: 0000400000000144 Showing all locks held in the system: 8 locks held by kworker/1:0/25: 1 lock held by khungtaskd/30: #0: ffffffff8eb38fa0 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] , at: rcu_read_lock include/linux/rcupdate.h:849 [inline] , at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746 2 locks held by getty/5592: #0: ffff888035b720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 ( &ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211 4 locks held by udevd/5830: #0: ffff8880348532f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182 #1: ffff888034db8c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff8880329331e8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff88807be61a20 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline] (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729 2 locks held by khidpd_04590009/5835: #0: ffff8880334d0078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1727 #1: ffffffff90063710 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165 1 lock held by syz-executor273/6633: #0: ffff8880334d0078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xff/0xeb0 net/bluetooth/l2cap_core.c:6919 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline] watchdog+0x1058/0x10a0 kernel/hung_task.c:399 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.14.0-rc4-syzkaller-00177-ga466fd7e9faf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events hidp_session_dev_work RIP: 0010:io_serial_out+0x7e/0xc0 drivers/tty/serial/8250/8250_port.c:416 Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 fc 1a a5 fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7 RSP: 0018:ffffc900001f6bd0 EFLAGS: 00000002 RAX: 000000000000005b RBX: ffffffff9a9960a0 RCX: 0000000000000000 RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 RBP: 0000000000000000 R08: ffffffff8583de0b R09: 1ffff11004a1e046 R10: dffffc0000000000 R11: ffffffff8583ddc0 R12: dffffc0000000000 R13: 000000000000005b R14: 000000000000005b R15: 00000000000003f8 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdcce16498 CR3: 000000003012c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: serial8250_console_write+0x1430/0x1e00 drivers/tty/serial/8250/8250_port.c:3465 console_emit_next_record kernel/printk/printk.c:3122 [inline] console_flush_all+0x869/0xeb0 kernel/printk/printk.c:3210 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline] console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3309 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2432 dev_vprintk_emit+0x341/0x400 drivers/base/core.c:4890 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4901 _dev_warn+0x122/0x170 drivers/base/core.c:4957 hid_parser_main+0x812/0xc00 drivers/hid/hid-core.c:660 hid_open_report+0xbd8/0x1580 drivers/hid/hid-core.c:1324 hid_parse include/linux/hid.h:1124 [inline] hid_generic_probe+0x3d/0x90 drivers/hid/hid-generic.c:66 __hid_device_probe drivers/hid/hid-core.c:2713 [inline] hid_device_probe+0x3bf/0x710 drivers/hid/hid-core.c:2750 really_probe+0x2b9/0xad0 drivers/base/dd.c:658 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800 driver_probe_device+0x50/0x430 drivers/base/dd.c:830 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:958 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:462 __device_attach+0x333/0x520 drivers/base/dd.c:1030 bus_probe_device+0x189/0x260 drivers/base/bus.c:537 device_add+0x856/0xbf0 drivers/base/core.c:3665 hid_add_device+0x3b6/0x520 drivers/hid/hid-core.c:2896 hidp_session_dev_add net/bluetooth/hidp/core.c:856 [inline] hidp_session_dev_work+0x46/0x160 net/bluetooth/hidp/core.c:895 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd30 kernel/workqueue.c:3400 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.181 msecs