Extracting prog: 52m36.615216368s Minimizing prog: 2h13m26.383096s Simplifying prog options: 0s Extracting C: 3m12.615402847s Simplifying C: 23m41.66477938s extracting reproducer from 44 programs testing a last program of every proc single: executing 9 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFULNL_MSG_CONFIG-socket$inet_tcp-connect$inet-close-socket$inet6_sctp-setsockopt$inet6_IPV6_RTHDR-socket$alg-bind$alg-openat$tun-ioctl$TUNSETIFF-socket$nl_route-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-sendmmsg$inet6 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x3, 0x3, 0x8}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000080)="0300ff04", 0x4) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$netlink-bpf$PROG_LOAD_XDP-socket$nl_audit-sendmsg$nl_route-bind$netlink-bpf$PROG_LOAD-openat$cgroup_ro-ioctl$BTRFS_IOC_SUBVOL_CREATE_V2-socket$packet-setsockopt$packet_fanout-syz_emit_ethernet-mmap-bpf$MAP_CREATE-bpf$PROG_LOAD-socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$NFT_MSG_GETFLOWTABLE-socket$can_bcm-ioctl$ifreq_SIOCGIFINDEX_vcan-connect$can_bcm-socket$pptp-accept4-sendmsg$can_bcm-sendmsg$nl_route_sched-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$OBJ_GET_MAP-bpf$BPF_PROG_WITH_BTFID_LOAD-ioctl$sock_inet_SIOCSIFDSTADDR detailed listing: executing program 0: socket(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0xd, 0x4, &(0x7f0000001a40)=ANY=[@ANYRES8=r0], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async, rerun: 64) r2 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async, rerun: 32) bind$netlink(r0, &(0x7f0000001dc0)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f00000018c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r2], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000640)={{r3}, 0x0, 0xc, @unused=[0x1, 0x4896, 0xb6a, 0xf0a7], @name="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"}) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8001}, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r3, 0xffffe000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00b\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000600000018150000a22b203f53845033f8a91232409e618992db88ac807cf186406d7d2e7b08f369db4fd4956d05df509ad48092087ae8cb09bc6e3f675a1bdf8ebd770a0c299b5b3e9c731dfeacc0eb6ecb7422", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfffb70300000a0037f6b7040000820eb08c31a26e1d3348a6ee2873e2850000000a0000009500dd41ece400000000000000000000000000000000000000000c7228c7fa20a2800acf36539e8bc9e877ce2ab35b9e2417a929382b275129b343a5ccb512b34ea4b105477ef6c92c94a26f21383c8082a4531f7f0294a634da06f556ee"], &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x40000) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001c40)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000001cc0)={0x1d, r9}, 0x10) (async) r10 = socket$pptp(0x18, 0x1, 0x2) accept4(r10, 0x0, 0x0, 0x800) (async) sendmsg$can_bcm(r8, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="05000000000000", @ANYRES64=0x0, @ANYBLOB="c7b37ecd7f18204e5773a4d79be73f64ad902b751103250df395bf1ec97c", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000001900)=ANY=[@ANYBLOB="186700000e000000000000000100000000001819fcff0100"/42], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xed, &(0x7f0000002000)=""/237, 0x40f00, 0x1cd5b2155ff3d635, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x6, 0x3}, 0x10, 0x14427, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r13], &(0x7f0000000540)=[{0x3, 0x3, 0x6, 0xe}], 0x10, 0xfff}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e23, @loopback}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$IEEE802154_SET_MACPARAMS-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_COALESCE_SET-bpf$PROG_LOAD-syz_init_net_socket$nl_generic-sendmsg$NL802154_CMD_NEW_SEC_LEVEL detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000f00000005000d"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000000000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb7030000b7000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x40040) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_raw-ioctl$sock_SIOCGIFINDEX-ioctl$XFS_IOC_START_COMMIT-sendmsg$can_raw-mmap-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_MCAST_RATE-openat$ppp-ioctl$PPPIOCNEWUNIT-syz_extract_tcp_res-ioctl$PPPIOCATTACH-socket$tipc-setsockopt-ioctl$EXT4_IOC_SETFSUUID-socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED-socket$tipc-syz_emit_ethernet-ioctl$EXT4_IOC_SWAP_BOOT-bpf$BPF_LINK_CREATE_XDP-ioctl$XFS_IOC_SCRUBV_METADATA-ioctl$sock_SIOCGIFINDEX_80211-socket$l2tp6-getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED-getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_TP_METER-socket$can_raw-ioctl$sock_SIOCOUTQ detailed listing: executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x3, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "94f728550689d3fc87f3aca46207bc45ea2a79903315c5f860c3e73091b60a083eb6ebd1d7bd9a68a351b445c17ad9194719ab5c6abc803e01787a064870c70f"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x1010, r2, 0xc2949000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x36}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x54}}, 0x8000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000400)=0x3) syz_extract_tcp_res(&(0x7f0000000440), 0x7a49, 0xfffffffd) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000480)=0x2) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt(r6, 0xc, 0x62dc5b50, &(0x7f00000004c0)="4436751b940b8c1c66e0fcb09a32e40a265d476c7d253d2a7fd9bef69e6fe3d7f4082ffc64342bf6c55ac149878ae54fd94e24505ef7a663960a8ce67c2e04c3dd0cef01509e7a12c527ef9b56d167da4b6d9854b8f484dd3c8990d855a6042eca19828bb22c73983e3171fad3bbb47a0fd138e6e3a3ae4c4736c74bbd7933df7463", 0x82) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000580)={0x10, 0x0, "973ae0cd69ab5a2f1121bd59930414fd"}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r7, 0x84, 0x80, &(0x7f00000005c0)={0x1, 0xffff7fff}, 0x8) socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @loopback, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast2}}}}, &(0x7f0000000640)={0x1, 0x3, [0x81, 0x328, 0x8a0, 0x627]}) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r1, 0x25, 0x19, @void}, 0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r7, 0xc0285840, &(0x7f0000000700)={0x9, 0x4, 0xe, 0x0, 0x8, 0x4, 0x0, &(0x7f00000006c0)=[{0x19, 0x101}, {0x12, 0x101, 0x2}, {0x6, 0x101, 0x5}, {0x7, 0x1ff, 0x1600}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r7, 0x84, 0x80, &(0x7f0000000780)={0x1}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r7, 0x84, 0x83, &(0x7f0000000800)={r8}, &(0x7f0000000840)=0x8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f00000009c0)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-socket$inet6_udp-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-socket-ioctl$sock_SIOCGIFINDEX-bpf$MAP_LOOKUP_ELEM-socket$nl_route-sendmsg$nl_route_sched-syz_init_net_socket$llc-bind$llc-setsockopt$llc_int-bpf$PROG_LOAD-sendto$packet-socket$netlink-socketpair$unix-setsockopt$SO_ATTACH_FILTER-getsockopt$sock_buf-socket$inet6_udp-setsockopt$IP6T_SO_SET_REPLACE-getpeername$packet-openat$ppp-ioctl$PPPIOCGNPMODE-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-setsockopt$inet6_tcp_int-openat$cgroup_ro-syz_emit_ethernet-writev-openat$cgroup_ro detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r2 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f00000004c0), 0x10) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000f00)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="00000000004aae2f5c03000000000000850000000d000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendto$packet(r2, &(0x7f0000000240)="01154e0001000011221e445588fbca0100011606", 0x14, 0x4044015, &(0x7f0000000340)={0x11, 0x0, r3, 0x0, 0x0, 0x0}, 0x14) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000f80)={0x2, &(0x7f0000000fc0)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000001000)=""/1, &(0x7f0000001040)=0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x250, 0xffffffff, 0x380, 0x250, 0x6a0, 0x6a0, 0xffffffff, 0x6a0, 0x6a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1], 0x9}}, @common=@unspec=@pkttype={{}, {0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@eui64, @common=@rt={{}, {0x7fff, [0xffffffff, 0x5], 0xf1a, 0x20, 0x0, [@empty, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cc) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x124001, 0x0) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000300)={0x80fd, 0x3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r8, 0x0, 0x4, 0x6, 0xac8, 0x73, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x0, 0x700, 0xffffffc0, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x8, 0x20100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000280)=0x3, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) writev(r10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='/', 0x1}], 0xe) openat$cgroup_ro(r10, &(0x7f0000000dc0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_generic-sendmsg$nl_generic-socket$inet6_icmp_raw-setsockopt-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601010000000000000000020000000900020073797a300000000011000300686173683a69702c6d61726b000000000500040003000000050005080200080013400000000205000100"/94], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007000000ff5333bd03f263c41cd7dd24198c11907d30967aa08596460fe5efa073bb5606d4bdea0092b52c302f7f8df1cb704e3bfb48c3ee667eaa3cfd288a"], 0x4c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_generic-sendmsg$nl_generic-socket$inet6_icmp_raw-setsockopt-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601010000000000000000020000000900020073797a300000000011000300686173683a69702c6d61726b000000000500040003000000050005080200080013400000000205000100"/94], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007000000ff5333bd03f263c41cd7dd24198c11907d30967aa08596460fe5efa073bb5606d4bdea0092b52c302f7f8df1cb704e3bfb48c3ee667eaa3cfd288a"], 0x4c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet-sendmsg$nl_generic-setsockopt$netlink_NETLINK_NO_ENOBUFS detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)={@random="2faf618694b8", @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @private0, @mcast2, {[], {{0x4e23, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3}}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x201, 0x4) (rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit single: successfully extracted reproducer found reproducer with 23 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)={@random="2faf618694b8", @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @private0, @mcast2, {[], {{0x4e23, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3}}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)={@random="2faf618694b8", @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @private0, @mcast2, {[], {{0x4e23, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3}}}}}}}, 0x0) (async, rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-getsockopt-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0xff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffe85) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$inet_icmp_raw-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x55) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-syz_genetlink_get_family_id$batadv-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0700000071b47d9261af1fb12160c05d0f25", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b0000002c000180060005004e22000008000300ac14140a0800060000000000080006009024be80060005004e2000001800018014000400ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x800005, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0xd, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x80009, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-socket$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-epoll_create-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) epoll_create(0x8) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-sendmsg$netlink-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_GET-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-syz_genetlink_get_family_id$devlink-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_generic-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-syz_init_net_socket$nl_rdma-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-sendto$rxrpc-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$rxrpc-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 64) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, 0x0, 0x4008090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-socket$inet6-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true reproducing took 3h43m20.001007373s repro crashed as (corrupted=false): INFO: task syz.0.17:6086 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:22344 pid:6086 tgid:6086 ppid:5798 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0c9019e559 RSP: 002b:00007fff6c896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f0c90425fa0 RCX: 00007f0c9019e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f0c90235ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0c90425fac R14: 00007f0c90425fa0 R15: 00007f0c90425fa0 INFO: task syz.3.20:6087 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:22920 pid:6087 tgid:6087 ppid:5806 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1636f9e559 RSP: 002b:00007ffce653a218 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1637225fa0 RCX: 00007f1636f9e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f1637035ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1637225fac R14: 00007f1637225fa0 R15: 00007f1637225fa0 INFO: task syz.2.19:6088 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:22792 pid:6088 tgid:6088 ppid:5804 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f633939e559 RSP: 002b:00007ffeda7c33d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6339625fa0 RCX: 00007f633939e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f6339435ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6339625fac R14: 00007f6339625fa0 R15: 00007f6339625fa0 INFO: task syz.4.21:6089 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:22792 pid:6089 tgid:6089 ppid:5810 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f41ed59e559 RSP: 002b:00007ffd1759b9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f41ed825fa0 RCX: 00007f41ed59e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f41ed635ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f41ed825fac R14: 00007f41ed825fa0 R15: 00007f41ed825fa0 Showing all locks held in the system: locks held by kworker/u8:0/12: 1, last CPU#0: #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by khungtaskd/33: 1, last CPU#1: #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:4/59: 3, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88803c0f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff88803c0f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/u8:9/1255: 3, last CPU#1: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88805ad90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff88805ad90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by getty/5373: 2, on CPU#0: #0: ffff88803656b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.1.18/6055: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.17/6086: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.20/6087: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.19/6088: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.21/6089: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.22/6209: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.23/6273: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.8.25/6303: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.26/6304: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.24/6305: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.27/6342: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u9:5/6381: 3, on CPU#1: #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88802c8e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 net/bluetooth/hci_sync.c:337 locks held by syz.0.28/6412: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.31/6489: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.29/6490: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.30/6491: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.32/6535: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.33/6576: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.34/6665: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.8.35/6701: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.36/6702: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.37/6740: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.38/6775: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.39/6851: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.40/6912: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.41/6916: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.42/6934: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.43/6971: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.44/7014: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u8:11/7063: 5, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 kernel/jump_label.c:247 #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline] #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 kernel/jump_label.c:238 #4: ffffffff8fbff760 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145 locks held by syz.8.45/7160: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.46/7166: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.47/7167: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.48/7173: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.49/7216: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.50/7330: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u8:15/7339: 3, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880607f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff8880607f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by syz.3.51/7383: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.53/7403: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.52/7409: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.54/7421: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:409 Code: e8 de 6b 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 4b c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 35 77 06 cc 44 89 f9 80 e1 07 RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: ffffffff8574a450 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055af9c6d3a50 CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: serial_in drivers/tty/serial/8250/8250.h:128 [inline] serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline] wait_for_lsr+0x184/0x2f0 drivers/tty/serial/8250/8250_port.c:2013 serial8250_fifo_wait_for_lsr_thre drivers/tty/serial/8250/8250_port.c:3270 [inline] __serial8250_console_fifo_write+0xcd/0x3e0 drivers/tty/serial/8250/8250_port.c:3345 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline] __serial8250_console_write drivers/tty/serial/8250/8250_port.c:3432 [inline] serial8250_console_write+0xa7e/0x1200 drivers/tty/serial/8250/8250_port.c:3496 nbcon_emit_next_record+0xef5/0x1a90 kernel/printk/nbcon.c:-1 nbcon_emit_one kernel/printk/nbcon.c:1157 [inline] nbcon_kthread_func+0x679/0x880 kernel/printk/nbcon.c:1271 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task syz.0.17:6086 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:22344 pid:6086 tgid:6086 ppid:5798 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0c9019e559 RSP: 002b:00007fff6c896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f0c90425fa0 RCX: 00007f0c9019e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f0c90235ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0c90425fac R14: 00007f0c90425fa0 R15: 00007f0c90425fa0 INFO: task syz.3.20:6087 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:22920 pid:6087 tgid:6087 ppid:5806 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1636f9e559 RSP: 002b:00007ffce653a218 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1637225fa0 RCX: 00007f1636f9e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f1637035ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1637225fac R14: 00007f1637225fa0 R15: 00007f1637225fa0 INFO: task syz.2.19:6088 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:22792 pid:6088 tgid:6088 ppid:5804 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f633939e559 RSP: 002b:00007ffeda7c33d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6339625fa0 RCX: 00007f633939e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f6339435ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6339625fac R14: 00007f6339625fa0 R15: 00007f6339625fa0 INFO: task syz.4.21:6089 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:22792 pid:6089 tgid:6089 ppid:5810 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c1/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2579 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x8ef/0xa80 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1923 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2713 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2767 __sys_sendmsg net/socket.c:2799 [inline] __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2802 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f41ed59e559 RSP: 002b:00007ffd1759b9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f41ed825fa0 RCX: 00007f41ed59e559 RDX: 0000000004008090 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f41ed635ab8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f41ed825fac R14: 00007f41ed825fa0 R15: 00007f41ed825fa0 Showing all locks held in the system: locks held by kworker/u8:0/12: 1, last CPU#0: #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 locks held by khungtaskd/33: 1, last CPU#1: #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:4/59: 3, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88803c0f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff88803c0f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by kworker/u8:9/1255: 3, last CPU#1: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90005227c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88805ad90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff88805ad90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by getty/5373: 2, on CPU#0: #0: ffff88803656b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz.1.18/6055: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.17/6086: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.20/6087: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.19/6088: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.21/6089: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.22/6209: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.23/6273: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.8.25/6303: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.26/6304: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.24/6305: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.27/6342: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u9:5/6381: 3, on CPU#1: #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88802aa5b940 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000469fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff88802c8e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 net/bluetooth/hci_sync.c:337 locks held by syz.0.28/6412: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.31/6489: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.29/6490: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.30/6491: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.32/6535: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.33/6576: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.34/6665: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.8.35/6701: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.36/6702: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.37/6740: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.38/6775: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.39/6851: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.40/6912: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.3.41/6916: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.42/6934: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.43/6971: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.44/7014: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u8:11/7063: 5, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc9000636fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 kernel/jump_label.c:247 #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline] #3: ffffffff8fe38ae0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 kernel/jump_label.c:238 #4: ffffffff8fbff760 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145 locks held by syz.8.45/7160: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.9.46/7166: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.1.47/7167: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.0.48/7173: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.4.49/7216: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.2.50/7330: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by kworker/u8:15/7339: 3, last CPU#0: #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline] #1: ffffc90006d57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479 #2: ffff8880607f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6906 [inline] #2: ffff8880607f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:550 locks held by syz.3.51/7383: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.6.53/7403: 2, on CPU#1: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.5.52/7409: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 locks held by syz.7.54/7421: 2, on CPU#0: #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 fs/nfsd/nfsctl.c:2057 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:409 Code: e8 de 6b 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 4b c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 35 77 06 cc 44 89 f9 80 e1 07 RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: ffffffff8574a450 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055af9c6d3a50 CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: serial_in drivers/tty/serial/8250/8250.h:128 [inline] serial_lsr_in drivers/tty/serial/8250/8250.h:150 [inline] wait_for_lsr+0x184/0x2f0 drivers/tty/serial/8250/8250_port.c:2013 serial8250_fifo_wait_for_lsr_thre drivers/tty/serial/8250/8250_port.c:3270 [inline] __serial8250_console_fifo_write+0xcd/0x3e0 drivers/tty/serial/8250/8250_port.c:3345 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3378 [inline] __serial8250_console_write drivers/tty/serial/8250/8250_port.c:3432 [inline] serial8250_console_write+0xa7e/0x1200 drivers/tty/serial/8250/8250_port.c:3496 nbcon_emit_next_record+0xef5/0x1a90 kernel/printk/nbcon.c:-1 nbcon_emit_one kernel/printk/nbcon.c:1157 [inline] nbcon_kthread_func+0x679/0x880 kernel/printk/nbcon.c:1271 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245