Extracting prog: 23m23.220383068s Minimizing prog: 3h28m48.917465764s Simplifying prog options: 0s Extracting C: 4m8.571901445s Simplifying C: 1h18m35.028411333s extracting reproducer from 45 programs testing a last program of every proc single: executing 10 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-mmap-socket$vsock_stream-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-mmap-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-pipe-syz_genetlink_get_family_id$netlbl_mgmt-socket$inet_tcp-setsockopt$inet_tcp_int-sendmsg$NLBL_MGMT_C_ADD-ioctl$F2FS_IOC_MOVE_RANGE-bpf$BPF_BTF_LOAD-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x6003}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "9fa837", 0x8, 0x2c, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, {[@dstopts={0x21}]}}}}}}, 0x4a) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) pipe(&(0x7f0000002740)) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xe, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0xffffffff, 0x10000, @value=r7}, 0x28) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='syz_tun\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$netlink-sendmsg$NFT_BATCH-setsockopt$sock_linger-setsockopt$packet_fanout-setsockopt$packet_fanout_data detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1000}, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x1}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0xfc4f, 0xa6, 0x3d, 0x3}, {0x1, 0x2, 0x8, 0x7}, {0xe, 0x3, 0x40, 0xff}, {0x8f, 0xa, 0x7f, 0x2}, {0x9, 0x5, 0x9, 0x101}, {0x3, 0x5c, 0x8, 0x80000000}]}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-mmap-socket$vsock_stream-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-mmap-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-pipe-syz_genetlink_get_family_id$netlbl_mgmt-socket$inet_tcp-setsockopt$inet_tcp_int-sendmsg$NLBL_MGMT_C_ADD-ioctl$F2FS_IOC_MOVE_RANGE-bpf$BPF_BTF_LOAD-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x6003}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "9fa837", 0x8, 0x2c, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, {[@dstopts={0x21}]}}}}}}, 0x4a) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) pipe(&(0x7f0000002740)) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xe, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0xffffffff, 0x10000, @value=r7}, 0x28) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='syz_tun\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bind$packet-syz_genetlink_get_family_id$devlink-sendmsg$NL80211_CMD_SET_COALESCE detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) r10 = accept4(r2, 0x0, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r14 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) (async) bind$packet(r14, &(0x7f0000000580)={0x11, 0xf6, r12, 0x1, 0xaf, 0x6, @random="baecc852a754"}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)=ANY=[], 0x238}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) program crashed: INFO: rcu detected stall in worker_thread single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bind$packet-syz_genetlink_get_family_id$devlink detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) r10 = accept4(r2, 0x0, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r14 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) (async) bind$packet(r14, &(0x7f0000000580)={0x11, 0xf6, r12, 0x1, 0xaf, 0x6, @random="baecc852a754"}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r10) program crashed: INFO: task hung in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bind$packet detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r13 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) (async) bind$packet(r13, &(0x7f0000000580)={0x11, 0xf6, r11, 0x1, 0xaf, 0x6, @random="baecc852a754"}, 0x14) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r13 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) (async) program crashed: INFO: rcu detected stall in sys_sendto testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route-socket$packet detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-socket$nl_route detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route-socketpair$unix detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4-socket$nl_route detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix-accept4 detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) accept4(r2, 0x0, 0x0, 0x0) (async) program crashed: INFO: rcu detected stall in worker_thread program crashed: INFO: rcu detected stall in smp_call_function testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix-recvmsg$unix detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) program crashed: INFO: rcu detected stall in tc_modify_qdisc testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY-socket$unix detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) socket$unix(0x1, 0x2, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched-setsockopt$ALG_SET_KEY detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in sys_clone testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-bpf$PROG_LOAD-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in sys_readlink testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-socket$inet6_icmp_raw-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-syz_genetlink_get_family_id$nl80211-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in smp_call_function testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-bind$alg-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in smp_call_function testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$alg-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$MAP_CREATE-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in NF_HOOK testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_PROG_TEST_RUN-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in sys_clone testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_WITH_BTFID_LOAD-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r1, 0x0, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) program did not crash testing program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=7m16.139505394s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread simplifying C reproducer testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in smp_call_function testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in x64_sys_call a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=7m16.139505394s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-socket$netlink-bpf$MAP_CREATE-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread reproducing took 5h14m55.738193677s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=125c/1/0x4000000000000000 softirq=15080/15081 fqs=3 rcu: hardirqs softirqs csw/system rcu: number: 14 24 20 rcu: cputime: 0 11 0 ==> 105040(ms) rcu: (detected by 1, t=10504 jiffies, g=10021, q=1175 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 979 Comm: kworker/0:3 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_power_efficient gc_worker RIP: 0010:__lock_acquire+0x29e/0xd20 kernel/locking/lockdep.c:5174 Code: 00 4c 89 6c 24 28 4a 8d 04 ad 00 00 00 00 4c 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 09 ca 41 89 54 c7 20 <4d> 89 4c c7 08 49 89 5c c7 10 4c 8b 6c 24 68 4d 89 6c c7 18 65 8b RSP: 0018:ffffc90000007b30 EFLAGS: 00000002 RAX: 000000000000000f RBX: ffff888034020300 RCX: 00000000000007c4 RDX: 00000000000c47c4 RSI: 00000000000007c4 RDI: ffff888025dc5a00 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff898563d4 R10: dffffc0000000000 R11: ffffffff89856310 R12: 0000000000000000 R13: 0000000000000003 R14: 0000000000000000 R15: ffff888025dc64f0 FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd18ae762d0 CR3: 000000000df38000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] advance_sched+0xc4/0xc90 net/sched/sch_taprio.c:924 __run_hrtimer kernel/time/hrtimer.c:1761 [inline] __hrtimer_run_queues+0x529/0xc60 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline] __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 include/linux/seqlock.h:75 Code: f8 4d 85 e4 75 16 e8 91 1a 2a f8 eb 15 e8 8a 1a 2a f8 e8 c5 77 cf 01 4d 85 e4 74 ea e8 7b 1a 2a f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 RSP: 0018:ffffc9000396f860 EFLAGS: 00000293 RAX: ffffffff89964155 RBX: 0000000000000000 RCX: ffff888025dc5a00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000396f910 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 0000000000000200 R13: ffff888025d7c318 R14: 1ffff9200072df0c R15: dffffc0000000000 nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:333 [inline] gc_worker+0x308/0x1380 net/netfilter/nf_conntrack_core.c:1537 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.129 msecs rcu: rcu_preempt kthread starved for 10489 jiffies! g10021 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5396 [inline] __schedule+0x16f5/0x4d00 kernel/sched/core.c:6785 __schedule_loop kernel/sched/core.c:6863 [inline] schedule+0x165/0x360 kernel/sched/core.c:6878 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2054 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2256 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 1141 Comm: kworker/u8:6 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 kernel/smp.c:885 Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b RSP: 0018:ffffc90003d8f6a0 EFLAGS: 00000293 RAX: ffffffff81b4e7e0 RBX: ffff8880b873cb40 RCX: ffff8880271e5a00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90003d8f800 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 1ffff110170c86b5 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8 FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd18ae41564 CR3: 000000000df38000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1052 on_each_cpu include/linux/smp.h:71 [inline] smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2660 [inline] smp_text_poke_batch_finish+0x5e0/0x1100 arch/x86/kernel/alternative.c:2870 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x128/0x250 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xad/0x240 mm/kfence/core.c:850 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=125c/1/0x4000000000000000 softirq=15080/15081 fqs=3 rcu: hardirqs softirqs csw/system rcu: number: 14 24 20 rcu: cputime: 0 11 0 ==> 105040(ms) rcu: (detected by 1, t=10504 jiffies, g=10021, q=1175 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 979 Comm: kworker/0:3 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_power_efficient gc_worker RIP: 0010:__lock_acquire+0x29e/0xd20 kernel/locking/lockdep.c:5174 Code: 00 4c 89 6c 24 28 4a 8d 04 ad 00 00 00 00 4c 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 09 ca 41 89 54 c7 20 <4d> 89 4c c7 08 49 89 5c c7 10 4c 8b 6c 24 68 4d 89 6c c7 18 65 8b RSP: 0018:ffffc90000007b30 EFLAGS: 00000002 RAX: 000000000000000f RBX: ffff888034020300 RCX: 00000000000007c4 RDX: 00000000000c47c4 RSI: 00000000000007c4 RDI: ffff888025dc5a00 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff898563d4 R10: dffffc0000000000 R11: ffffffff89856310 R12: 0000000000000000 R13: 0000000000000003 R14: 0000000000000000 R15: ffff888025dc64f0 FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd18ae762d0 CR3: 000000000df38000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] advance_sched+0xc4/0xc90 net/sched/sch_taprio.c:924 __run_hrtimer kernel/time/hrtimer.c:1761 [inline] __hrtimer_run_queues+0x529/0xc60 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline] __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 include/linux/seqlock.h:75 Code: f8 4d 85 e4 75 16 e8 91 1a 2a f8 eb 15 e8 8a 1a 2a f8 e8 c5 77 cf 01 4d 85 e4 74 ea e8 7b 1a 2a f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 RSP: 0018:ffffc9000396f860 EFLAGS: 00000293 RAX: ffffffff89964155 RBX: 0000000000000000 RCX: ffff888025dc5a00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000396f910 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 0000000000000200 R13: ffff888025d7c318 R14: 1ffff9200072df0c R15: dffffc0000000000 nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:333 [inline] gc_worker+0x308/0x1380 net/netfilter/nf_conntrack_core.c:1537 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.129 msecs rcu: rcu_preempt kthread starved for 10489 jiffies! g10021 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5396 [inline] __schedule+0x16f5/0x4d00 kernel/sched/core.c:6785 __schedule_loop kernel/sched/core.c:6863 [inline] schedule+0x165/0x360 kernel/sched/core.c:6878 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2054 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2256 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 1141 Comm: kworker/u8:6 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 kernel/smp.c:885 Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b RSP: 0018:ffffc90003d8f6a0 EFLAGS: 00000293 RAX: ffffffff81b4e7e0 RBX: ffff8880b873cb40 RCX: ffff8880271e5a00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90003d8f800 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 1ffff110170c86b5 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8 FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd18ae41564 CR3: 000000000df38000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1052 on_each_cpu include/linux/smp.h:71 [inline] smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2660 [inline] smp_text_poke_batch_finish+0x5e0/0x1100 arch/x86/kernel/alternative.c:2870 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x128/0x250 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xad/0x240 mm/kfence/core.c:850 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245