Extracting prog: 11m34.07269436s
Minimizing prog: 1h13m37.414085733s
Simplifying prog options: 16m31.441107685s
Extracting C: 34.708356382s
Simplifying C: 0s


extracting reproducer from 32 programs
testing a last program of every proc
single: executing 7 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$inet6_IPV6_XFRM_POLICY-setsockopt$inet6_MCAST_MSFILTER-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_MSG_GETSET-ioctl$KVM_CREATE_VM-ioctl$KVM_SIGNAL_MSI-connect$inet6-openat-openat$null-writev-fsopen-syz_open_procfs$namespace-open_by_handle_at-openat$kvm-openat$ptmx-ioctl$TCSETS-write$binfmt_aout-ioctl$TCSETS-syz_emit_ethernet-socket$netlink-socket$nl_netfilter-syz_usb_connect-sendmsg$IPSET_CMD_CREATE-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0xffff, 0xfffc, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff00000000}, {0x5e8, 0x5, 0x204, 0x4}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffc, 0x32}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000004}}, 0xe8)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x2d4}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x38, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x100000, 0xddd84004, 0xffff, 0x0, 0x7ff})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
writev(r3, &(0x7f00000023c0)=[{&(0x7f0000000700)="f985eefc9886014ea5c1fcbe756d321dc5eacb0e063c16a2557e9159afb6e034ec88b59195e6088c032b8434f80392ddbfab06906e42c50f7bc0e34a0af7f7ea2f167835726b5b7bcd1908000cd16917caf37f791bb7e207b47f10a55194c5065927b8d0421f245148eaa94948ca33d34506301c347e9cc27e77ee13f1b75835533b4444c6ed", 0x86}, {&(0x7f0000000800)}, {&(0x7f0000000840)="e2b2c4559266bc0c4a3523183eda13066911e2f388dc8e1f2afb48f4b4f309e45954ec91b7955978044f4e662f2941374ae0779c36145ba8ed561b8bed98d85b07ea04f52fc17e575d93df4fd734259f8b53e642076ef5b9c88b4d58d5190e0cef", 0x61}, {&(0x7f00000008c0)="3cc39f909975d58c80c2de52ace25c42bcc2a430754fbe78422d91e9d9e8462b3bdd3ca8b8fb174f013e19bed3ed3e441f823391a9f77540ef75648054621ec28cd69223f690068f8647911033fdcc2af5388a3fd0e40352f178e4ddf26585e99898da5b0498abe041578ebba6779318986b01ca2e0433d238bba73143dcc1592fde90cf140a1ba83f57c9f20590efb1cdf594ed7c", 0x95}, {&(0x7f00000013c0)="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", 0x1000}], 0x5)
fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r4, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r4], 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0xa04c, 0x3, 0xfffffffd, 0x3, 0x18, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})
syz_emit_ethernet(0x5e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd692c0b5800283afffe880000000000000000000000000101fe8000000000000000000000000000aa8900907800000000000000000300004b48695f0af0181a4800000000000000000100000000000000000000000000000001c78de167c81ae2b3232232a14ba853f0dc12d415accd17fefb2f41432640328376c5d1d5a32e2514bc63b2e7b64942cdf049c4678e1d5c3c497aeca76607fecaed696c061aaed8d83e6f9c9c87440e15b67b489843e6cd278661a08a90484d231f92f19f74260a7cf1dc4da0fc620229d2e4ca3cc80aa74e0887a1473be05ad924256d789b67bcffe97d581505efcc74c8252745c8eb6c93e94d3871716875723976793b979dbf90e7996d0ff11f533894b4f7be37d52b3f7cc3e201950de02a05aa8a90faea668ca51f8e149b3a7625bc30d4aa875caddc9af54e5027c05bd03d2200605883160dc7659f4b04279257c7af2a8e387695df9cff0e63ef9ff10d01bd8313c35f24ad80fac1f3cc86a84b7c33d74608dda0"], 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d00000000000009040000026bb22b000904fffffd1b070000091b40a10a14aa990809"], 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6000000002060500000000000000000001000000b926772e17cd6f29341400078005001500000000000800123c0000000311000302686173683a6e65742c6e6574007f8548740005000200000005000400000000000900020073797a31000000000500010007000000dbfc8709c7f4f500a84c14c4f1e80de2d73bc042c9732c799d5463ba7c3ff7a50687aef76067bda41da183f3a1dd802cd9813c2bcc52b097cd709574b36170bdbc3b3f8bacb2cbaa31eb11627ff421030063922fbd0eb0d000000000"], 0x60}}, 0x20004000)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x4cb8d6d46cf08447, 0x7, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-mmap-openat$kvm-ioctl$KVM_CREATE_VM-madvise-mremap
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

program crashed: INFO: task hung in corrupted
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-mmap-openat$kvm-ioctl$KVM_CREATE_VM-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-mmap-openat$kvm-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-mmap-openat$kvm-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-mmap-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-syz_usb_control_io$uac2-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
r2 = syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
syz_usb_control_io$uac2(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xc, 0xb1, {0xb1, 0x10, "d5810fbb7432f0d01027886c6a47da5958b5d412dfc53267c0f44f6d4e81dc608bf3adb0a216ea9b4f96062a3867aae3a3c3723b9db2b094a9ee776f9fdca3c6297d84bd2564ec6978424ed47adfced5325bfcb46fa87b00a1d93fe9746295755e89f7e62e6e4e941e257c82f302519603b1c695aa3448de301403ab8f94028f825b8b479959fde1e372fda9e00213383d588ad0ad264ced016900a8f83b03ddf681b7e8404a2e2e93ea87524de20b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x78, "64227430d2710605f177a4023e449e71b8048bb23186e9f629d68733cc534ab1106b8eea83f52af782b08c2c54455661e9f492bc5748c0f226e556e958f32ee41ea7f37aeb572b46215f2581d4c13f61a948dcecb7a647b204ab40fde4ffc51db122390fcf17127a4950ec08abafaa65ddf76205d01f47ba"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x3, "47ca4e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ff83"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "ed1b03"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "d4"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4a5a89"}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-sendmsg$nl_xfrm-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-socket$nl_xfrm-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-syz_usb_connect$midi-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
syz_usb_connect$midi(0x2, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0xd3, 0xc0, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x4, 0xf}, {0x9, 0x2}, {0xff, 0x3}, {0x3, 0xdc}, {0x7, 0x7}, {0x96, 0xfd}, {0xaf, 0x5}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0xdd, 0x8, {0x11, 0x25, 0x1, 0xd, "6f221153b51611c32ae65a7ebc"}}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, {0xa, 0x25, 0x1, 0x6, "59261cb2e734"}}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x4, 0xe2, 0xfc, {0xf, 0x25, 0x1, 0xb, "c9b5cceb0027e86a8741f0"}}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "ac3950bb68fd7846af8bf4"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf8, 0x1, 0x2e, {0xd, 0x25, 0x1, 0x9, "feae05ca3a3a7dd495"}}}, {{0x9, 0x5, 0xd, 0x1ad55106772dd186, 0x40, 0x6, 0xf9, 0x9, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x9, 0x60, 0xd}, 0x5a, &(0x7f0000000200)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x11, 0xb, 0x101}, @ssp_cap={0x1c, 0x10, 0xa, 0x65, 0x4, 0xd3d4, 0xf, 0x6, [0xffc030, 0x3f, 0x3fcf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x8, 0x3, 0x6, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x0, 0xf00f, 0x2000, [0xc000, 0x60cf, 0xff30, 0x30, 0xff00c0, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a78f57ad5bb7cfaf735d82c3cb1d764a18a6f997d1d87b117b54f93d54ed09bbe86668ca5a7337e69091be0611197df34318b3408345ccc82b973dfc93178caefbea725b5f7ead872a44e36b8054085a290d876dbc68cb0f0421d9957b9eb2006db6eb36e2368ac75305546e3cafc9c04e1bbfa12692d6a992fe536654d5792ff0b4c4f96036707b248b1f2a369ca9675a8f6fbd47da11542599c7241db3283a7581177e0e129de9aa348cf2a76248d6994b6aefbffb7024ea2678"}}]})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-sendmsg$IPSET_CMD_CREATE-madvise
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet-madvise
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
program did not crash
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
program did not crash
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
program did not crash
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
program did not crash
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
validation run: crashed=true
reproducing took 2h22m15.376487402s
repro crashed as (corrupted=true):
INFO: task kworker/u8:5:96 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:23864 pid:96    tgid:96    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d4/0x5630 kernel/sched/core.c:7239
 __schedule_loop kernel/sched/core.c:7316 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7331

report is corrupted, running repro again
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: INFO: task hung in corrupted
report is corrupted, running repro again
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$sock_ifreq-madvise
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

program crashed: no output from test machine
final repro crashed as (corrupted=false):