Extracting prog: 1h23m46.429104265s Minimizing prog: 1m34.357478097s Simplifying prog options: 0s Extracting C: 1m0.045114528s Simplifying C: 10m47.768872067s extracting reproducer from 8 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-sendmsg$can_j1939-syz_open_procfs-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_io_uring_setup-fstat-unshare-socket$nl_route-io_uring_setup-fanotify_init-fgetxattr-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched_retired-recvmsg-io_uring_enter-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) program did not crash single: failed to extract reproducer bisect: bisecting 8 programs with base timeout 30s testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 22, 5, 5, 21, 11, 5] detailed listing: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x1, r0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r2, 0x10000000) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x8001}}}}, 0xf) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000380)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xff7}}], [{@audit}, {@audit}, {@fowner_lt={'fowner<', r9}}, {@subj_role={'subj_role', 0x3d, '/dev/ptp0\x00'}}, {@appraise}, {@audit}, {@obj_role={'obj_role', 0x3d, '/dev/ptp0\x00'}}]}}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x813, r2, 0x8000000) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000004c0)={"303d277577925b6b4a2fd097b81f90495a53b711ed54e99d4c013dd3f4a24049", r2, 0xffffffffffffffff}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x55, 0x6000, @fd=r11, 0xe6, &(0x7f00000006c0)=[{&(0x7f0000000500)="993b96647ad00c59eed2cb025ce17628d08e524750ab33bcf6895fadee5a18ee892dc3a6d0d292e4b5c2f33a35e0f0ecd046cf0164aa4836d1667e375c370ca63f1bd6b1f88b5c998f632ce7027aa42afad646ecf72530379f7a707299f12cdeedf2d0fd50f44a0eb979b865993e21e59282471cb83877f5a391987f137aad02df8df01e806cbc95fbcbc6ddc220fe81dff2161341f29a1040d875b2f9acf7f0bb36490cae0d97ff560d86cde9cfb75cc781239487de315e26e74d", 0xbb}, {&(0x7f00000005c0)="b828194bbd9d6fdf4f6d0f727ae16a8f3f2c6bf487c6df2221b7b92bc671f5cb31f4db75de66916f524177c5175259567a71cf20cb664cfea5534dc1b1e0c765ce34fff158f361d4b4ef6b87e0e9429ea99e200ab02d84cc52a0608c57304a29057853b43facdf4026b8333930328e7edbef1a5132637097a0c0a6c66467f596a29670f2573e5d0bdc1275908193ef651186f8cc4966664f426667d4badff49e990449ff80", 0xa5}, {&(0x7f0000000680)="ec1e3206b7c3b1da24", 0x9}], 0x3, 0x7, 0x1, {0x0, r12}}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000740)={r8, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000780)={r2}, 0x1) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_reconf_req={{0x19, 0x9, 0x12}, {0x8349, 0x19, [0x9, 0x9, 0x8, 0x6, 0x3, 0x400, 0x1]}}}}, 0x1f) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000800)={0x0, "83eaa06b2fd8b79e33a1438c4300ef266bff1ea6f815933339deaeefd5d6ca56"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r13 = dup(r2) syz_emit_vhci(&(0x7f0000000880)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe8}, "c6e2a791b4a61dc9c8adb3474cf9e2742d29e1c99a628dc8c5a77b33ba20608021a02a3ca2ca2332cdd1f657bb9914463cae6e0387e304e9e743582c0c45d6632da464b5cb2b102718fb2aefd2ca34b515f12e86f017464e0ddb93fab13c7a9e1ae09c796340bd503dcd392ca6fdef2c203375c43271c50e99249d4d6d761f50320af2c3128e440d6ac9cdb96cc192f8895dd046ed9d5f1f4aa38ac587ae9fe7cca3ef41c1e1e6d335a78ea2e7be0fe05e2b4e905acc1d5426da232e8ff1284f90b5ea99c0b25f89b47d0eb32690ddcfb8700b60cfedda64113a50a31eea324696da05b2d0edd0cd"}, 0xec) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000980)={{0x0, 0x100, 0x6, 0xe, 0xfffffffffffffbff, 0x9, 0x0, 0x9, 0x10001, 0x5, 0x5, 0x0, 0x38, 0x9, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r13, 0x494c941334ec33b9, &(0x7f0000000a80)={{r14, r15+10000000}, {0x77359400}}, &(0x7f0000000ac0)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r13) sendmsg$ETHTOOL_MSG_DEBUG_GET(r16, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xac, r17, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c801) socket$inet_dccp(0x2, 0x6, 0x0) quotactl_fd$Q_SYNC(r13, 0xffffffff80000101, 0x0, 0x0) executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x4, 0x64}]}, 0x18}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0) executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f0000000140)={0xfffffffe, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) r3 = fanotify_init(0x8, 0x80000) r4 = dup(r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x900) readv(r1, &(0x7f0000000480), 0x1000000000000098) fanotify_mark(r3, 0x221, 0x48001069, r4, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x4, "b59db4ec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3], 0xd8}}, 0x80) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1012, 0x200000}) mmap(&(0x7f00004af000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x0) io_setup(0x2, &(0x7f0000000200)) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000100)) executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/4, 0xffffff76, 0x0, 0x800}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000002b00)=""/158, 0x9e}], 0x1) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0x4, 0x9f5}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5f) executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x4000000, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') fchdir(r1) io_uring_setup(0x3b4a, &(0x7f0000000ac0)) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-sendmsg$can_j1939-syz_open_procfs-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_io_uring_setup-fstat-unshare-socket$nl_route-io_uring_setup-fanotify_init-fgetxattr-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched_retired-recvmsg-io_uring_enter-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) program did not crash single: failed to extract reproducer bisect: bisecting 8 programs with base timeout 1m40s testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 22, 5, 5, 21, 11, 5] detailed listing: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x1, r0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r2, 0x10000000) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x8001}}}}, 0xf) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000380)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xff7}}], [{@audit}, {@audit}, {@fowner_lt={'fowner<', r9}}, {@subj_role={'subj_role', 0x3d, '/dev/ptp0\x00'}}, {@appraise}, {@audit}, {@obj_role={'obj_role', 0x3d, '/dev/ptp0\x00'}}]}}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x813, r2, 0x8000000) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000004c0)={"303d277577925b6b4a2fd097b81f90495a53b711ed54e99d4c013dd3f4a24049", r2, 0xffffffffffffffff}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x55, 0x6000, @fd=r11, 0xe6, &(0x7f00000006c0)=[{&(0x7f0000000500)="993b96647ad00c59eed2cb025ce17628d08e524750ab33bcf6895fadee5a18ee892dc3a6d0d292e4b5c2f33a35e0f0ecd046cf0164aa4836d1667e375c370ca63f1bd6b1f88b5c998f632ce7027aa42afad646ecf72530379f7a707299f12cdeedf2d0fd50f44a0eb979b865993e21e59282471cb83877f5a391987f137aad02df8df01e806cbc95fbcbc6ddc220fe81dff2161341f29a1040d875b2f9acf7f0bb36490cae0d97ff560d86cde9cfb75cc781239487de315e26e74d", 0xbb}, {&(0x7f00000005c0)="b828194bbd9d6fdf4f6d0f727ae16a8f3f2c6bf487c6df2221b7b92bc671f5cb31f4db75de66916f524177c5175259567a71cf20cb664cfea5534dc1b1e0c765ce34fff158f361d4b4ef6b87e0e9429ea99e200ab02d84cc52a0608c57304a29057853b43facdf4026b8333930328e7edbef1a5132637097a0c0a6c66467f596a29670f2573e5d0bdc1275908193ef651186f8cc4966664f426667d4badff49e990449ff80", 0xa5}, {&(0x7f0000000680)="ec1e3206b7c3b1da24", 0x9}], 0x3, 0x7, 0x1, {0x0, r12}}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000740)={r8, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000780)={r2}, 0x1) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_reconf_req={{0x19, 0x9, 0x12}, {0x8349, 0x19, [0x9, 0x9, 0x8, 0x6, 0x3, 0x400, 0x1]}}}}, 0x1f) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000800)={0x0, "83eaa06b2fd8b79e33a1438c4300ef266bff1ea6f815933339deaeefd5d6ca56"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r13 = dup(r2) syz_emit_vhci(&(0x7f0000000880)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe8}, "c6e2a791b4a61dc9c8adb3474cf9e2742d29e1c99a628dc8c5a77b33ba20608021a02a3ca2ca2332cdd1f657bb9914463cae6e0387e304e9e743582c0c45d6632da464b5cb2b102718fb2aefd2ca34b515f12e86f017464e0ddb93fab13c7a9e1ae09c796340bd503dcd392ca6fdef2c203375c43271c50e99249d4d6d761f50320af2c3128e440d6ac9cdb96cc192f8895dd046ed9d5f1f4aa38ac587ae9fe7cca3ef41c1e1e6d335a78ea2e7be0fe05e2b4e905acc1d5426da232e8ff1284f90b5ea99c0b25f89b47d0eb32690ddcfb8700b60cfedda64113a50a31eea324696da05b2d0edd0cd"}, 0xec) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000980)={{0x0, 0x100, 0x6, 0xe, 0xfffffffffffffbff, 0x9, 0x0, 0x9, 0x10001, 0x5, 0x5, 0x0, 0x38, 0x9, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r13, 0x494c941334ec33b9, &(0x7f0000000a80)={{r14, r15+10000000}, {0x77359400}}, &(0x7f0000000ac0)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r13) sendmsg$ETHTOOL_MSG_DEBUG_GET(r16, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xac, r17, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c801) socket$inet_dccp(0x2, 0x6, 0x0) quotactl_fd$Q_SYNC(r13, 0xffffffff80000101, 0x0, 0x0) executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x4, 0x64}]}, 0x18}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0) executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f0000000140)={0xfffffffe, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) r3 = fanotify_init(0x8, 0x80000) r4 = dup(r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x900) readv(r1, &(0x7f0000000480), 0x1000000000000098) fanotify_mark(r3, 0x221, 0x48001069, r4, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x4, "b59db4ec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3], 0xd8}}, 0x80) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1012, 0x200000}) mmap(&(0x7f00004af000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x0) io_setup(0x2, &(0x7f0000000200)) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000100)) executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/4, 0xffffff76, 0x0, 0x800}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000002b00)=""/158, 0x9e}], 0x1) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0x4, 0x9f5}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5f) executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x4000000, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') fchdir(r1) io_uring_setup(0x3b4a, &(0x7f0000000ac0)) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-sendmsg$can_j1939-syz_open_procfs-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_io_uring_setup-fstat-unshare-socket$nl_route-io_uring_setup-fanotify_init-fgetxattr-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched_retired-recvmsg-io_uring_enter-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) program did not crash single: failed to extract reproducer bisect: bisecting 8 programs with base timeout 6m0s testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 22, 5, 5, 21, 11, 5] detailed listing: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x1, r0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r2, 0x10000000) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x5, 0x2}, {0x8001}}}}, 0xf) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000380)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xff7}}], [{@audit}, {@audit}, {@fowner_lt={'fowner<', r9}}, {@subj_role={'subj_role', 0x3d, '/dev/ptp0\x00'}}, {@appraise}, {@audit}, {@obj_role={'obj_role', 0x3d, '/dev/ptp0\x00'}}]}}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x813, r2, 0x8000000) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000004c0)={"303d277577925b6b4a2fd097b81f90495a53b711ed54e99d4c013dd3f4a24049", r2, 0xffffffffffffffff}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x55, 0x6000, @fd=r11, 0xe6, &(0x7f00000006c0)=[{&(0x7f0000000500)="993b96647ad00c59eed2cb025ce17628d08e524750ab33bcf6895fadee5a18ee892dc3a6d0d292e4b5c2f33a35e0f0ecd046cf0164aa4836d1667e375c370ca63f1bd6b1f88b5c998f632ce7027aa42afad646ecf72530379f7a707299f12cdeedf2d0fd50f44a0eb979b865993e21e59282471cb83877f5a391987f137aad02df8df01e806cbc95fbcbc6ddc220fe81dff2161341f29a1040d875b2f9acf7f0bb36490cae0d97ff560d86cde9cfb75cc781239487de315e26e74d", 0xbb}, {&(0x7f00000005c0)="b828194bbd9d6fdf4f6d0f727ae16a8f3f2c6bf487c6df2221b7b92bc671f5cb31f4db75de66916f524177c5175259567a71cf20cb664cfea5534dc1b1e0c765ce34fff158f361d4b4ef6b87e0e9429ea99e200ab02d84cc52a0608c57304a29057853b43facdf4026b8333930328e7edbef1a5132637097a0c0a6c66467f596a29670f2573e5d0bdc1275908193ef651186f8cc4966664f426667d4badff49e990449ff80", 0xa5}, {&(0x7f0000000680)="ec1e3206b7c3b1da24", 0x9}], 0x3, 0x7, 0x1, {0x0, r12}}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000740)={r8, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000780)={r2}, 0x1) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_reconf_req={{0x19, 0x9, 0x12}, {0x8349, 0x19, [0x9, 0x9, 0x8, 0x6, 0x3, 0x400, 0x1]}}}}, 0x1f) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000800)={0x0, "83eaa06b2fd8b79e33a1438c4300ef266bff1ea6f815933339deaeefd5d6ca56"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r13 = dup(r2) syz_emit_vhci(&(0x7f0000000880)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe8}, "c6e2a791b4a61dc9c8adb3474cf9e2742d29e1c99a628dc8c5a77b33ba20608021a02a3ca2ca2332cdd1f657bb9914463cae6e0387e304e9e743582c0c45d6632da464b5cb2b102718fb2aefd2ca34b515f12e86f017464e0ddb93fab13c7a9e1ae09c796340bd503dcd392ca6fdef2c203375c43271c50e99249d4d6d761f50320af2c3128e440d6ac9cdb96cc192f8895dd046ed9d5f1f4aa38ac587ae9fe7cca3ef41c1e1e6d335a78ea2e7be0fe05e2b4e905acc1d5426da232e8ff1284f90b5ea99c0b25f89b47d0eb32690ddcfb8700b60cfedda64113a50a31eea324696da05b2d0edd0cd"}, 0xec) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000980)={{0x0, 0x100, 0x6, 0xe, 0xfffffffffffffbff, 0x9, 0x0, 0x9, 0x10001, 0x5, 0x5, 0x0, 0x38, 0x9, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r13, 0x494c941334ec33b9, &(0x7f0000000a80)={{r14, r15+10000000}, {0x77359400}}, &(0x7f0000000ac0)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r13) sendmsg$ETHTOOL_MSG_DEBUG_GET(r16, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xac, r17, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c801) socket$inet_dccp(0x2, 0x6, 0x0) quotactl_fd$Q_SYNC(r13, 0xffffffff80000101, 0x0, 0x0) executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x4, 0x64}]}, 0x18}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0) executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f0000000140)={0xfffffffe, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000240)) socket$key(0xf, 0x3, 0x2) r3 = fanotify_init(0x8, 0x80000) r4 = dup(r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x900) readv(r1, &(0x7f0000000480), 0x1000000000000098) fanotify_mark(r3, 0x221, 0x48001069, r4, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x4, "b59db4ec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3], 0xd8}}, 0x80) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1012, 0x200000}) mmap(&(0x7f00004af000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x0) io_setup(0x2, &(0x7f0000000200)) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000100)) executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/4, 0xffffff76, 0x0, 0x800}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000002b00)=""/158, 0x9e}], 0x1) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0x4, 0x9f5}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5f) executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x4000000, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') fchdir(r1) io_uring_setup(0x3b4a, &(0x7f0000000ac0)) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table bisect: bisecting 8 programs bisect: split chunks (needed=false): <7> bisect: split chunk #0 of len 7 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 21, 11, 5] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/4, 0xffffff76, 0x0, 0x800}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000002b00)=""/158, 0x9e}], 0x1) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0x4, 0x9f5}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5f) executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x4000000, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') fchdir(r1) io_uring_setup(0x3b4a, &(0x7f0000000ac0)) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-sendmsg$can_j1939-syz_open_procfs-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_io_uring_setup-fstat-unshare-socket$nl_route-io_uring_setup-fanotify_init-fgetxattr-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched_retired-recvmsg-io_uring_enter-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) program did not crash bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r4 = fanotify_init(0x200, 0x0) fgetxattr(r4, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r3, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000077512874a09e677406000000000a00a100", @ANYRES32=r8, @ANYBLOB="080008000204000014000200ff020000000000000000000000000001"], 0x34}}, 0x40014) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r3 = fanotify_init(0x200, 0x0) fgetxattr(r3, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r2, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r3 = fanotify_init(0x200, 0x0) fgetxattr(r3, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r2, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r3 = fanotify_init(0x200, 0x0) fgetxattr(r3, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) io_uring_enter(r2, 0x1b50, 0x3fcb, 0x14, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@deltclass={0xc60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x3, 0x10}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0xc10, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x200, 0x2, 0x5, 0x18180000, 0x9, 0x2, 0xe22, 0x4, 0x4, 0x8, 0x1ff, 0x2400000, 0x0, 0x6, 0x4, 0x8, 0x6, 0x7, 0x8, 0xffff, 0x679, 0x32c, 0x2, 0x10, 0x1, 0xf0c, 0x8, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x100, 0x9, 0x5, 0x6, 0x1, 0x4, 0x8, 0x40, 0x1, 0x45b, 0x2, 0x9, 0xd7a5, 0x800, 0x10001, 0x7, 0xb52, 0x80000001, 0x1, 0x401, 0x4, 0x6, 0x4, 0x6, 0x8, 0x3, 0x0, 0x9, 0x16, 0x400, 0x40, 0x5, 0x4, 0x7fff, 0x1, 0x2800000, 0x8000, 0x1d, 0xfff, 0x6, 0x1, 0x8356, 0x3, 0x240, 0x200, 0xca45, 0x8, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x8, 0x5, 0x6, 0x12e5, 0x3, 0x6, 0x3, 0x2f, 0x80000000, 0x0, 0x6, 0x4, 0x7f, 0x8, 0x8, 0x3829, 0x28, 0x70000000, 0x4, 0x10, 0x9, 0x3ff, 0x9, 0x10, 0x8000, 0x25b3, 0x8000, 0x3, 0xffffffff, 0x82, 0x8, 0x2, 0x5ac75925, 0xe37, 0x80000001, 0x280000, 0xa6e, 0x2, 0x1, 0x0, 0x43f2eaff, 0x9, 0x0, 0x6, 0xe, 0xfffeffff, 0x3, 0x4, 0xf, 0x383, 0x2, 0x9, 0x87, 0x6, 0x10001, 0x401, 0x7, 0xe116, 0x3, 0x7fff, 0x8, 0x1, 0x9, 0x2b, 0x100, 0x1, 0x4, 0x0, 0x5d53, 0x7, 0xfffffff7, 0x80, 0x7, 0x1d1, 0x3, 0x3, 0x23b9, 0xff, 0xffff41b3, 0x2, 0x5, 0x2, 0xa, 0x1, 0x6635, 0x7, 0x0, 0x7ff, 0x2, 0x37, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0, 0x700, 0x7, 0x9, 0xff, 0x7, 0x94, 0x7fffffff, 0xd, 0x644, 0xff, 0x9, 0x3, 0x3, 0x24c, 0x878d, 0x81, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x100, 0xb, 0xf, 0x8, 0x81, 0x8, 0x80, 0x0, 0x7, 0x2, 0x2, 0x33f6, 0x10, 0x8, 0x5, 0x80, 0x1, 0x40, 0x26000000, 0x0, 0x7, 0x0, 0xe, 0x4, 0x2, 0x64bc, 0x1, 0xa5, 0x9, 0x6, 0x6, 0xfffffffc, 0xb, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x7, 0x2, 0x7, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x1, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x91e2, 0x80, 0x10001, 0x8, 0x8, 0x280000, 0xe, 0x6, 0xffffffc0, 0x80010, 0x9, 0x0, 0x3, 0x3, 0x4, 0x5, 0x4ac, 0x6, 0x10, 0x2, 0xee, 0x4, 0x401, 0x5, 0x0, 0xa1a, 0x2, 0xb, 0x400, 0x687, 0xffff, 0x35680606, 0x2, 0x3137047b, 0x7, 0x3, 0x10, 0x2, 0xe, 0x4, 0x9, 0x5, 0x7, 0xfffffff8, 0xf, 0x5, 0x8, 0x3, 0x8, 0x19, 0x1000, 0x80000000, 0x101, 0x2, 0x7, 0x3, 0x10000, 0x1, 0x7, 0x4, 0xf4e, 0x3f7, 0x5, 0x9, 0xffff9683, 0x2, 0x8, 0x9, 0x3, 0x4c1, 0xffffffff, 0xa2, 0x5, 0xfffffffb, 0xffffffff, 0x7, 0x4, 0x35c, 0x7f, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0x80, 0xffffffff, 0x9, 0x101, 0x4, 0x8, 0x8, 0x3, 0x9, 0x1, 0x2, 0x8, 0x5f, 0x1, 0x4, 0x2, 0xb, 0xfe3, 0xbc, 0x9, 0x99, 0x800, 0x0, 0x7, 0x7, 0x7, 0x400, 0x1, 0x1, 0x1e, 0x595, 0x4, 0x3, 0x3, 0x5, 0x5, 0x5, 0x2, 0xe6c, 0x0, 0x4, 0x8, 0x7, 0x38e7e526, 0x2, 0x6, 0x3, 0x6, 0x3, 0x5, 0x80000000, 0x5, 0x0, 0xffffffff, 0x2, 0x60b, 0x7, 0x6fd5, 0x4fa8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdf4a, 0x80, 0x9, 0x7f, 0x7ff, 0x7, 0x400, 0x3, 0xfffffffa, 0x3b, 0x5120, 0x8, 0x5, 0xf, 0x2, 0x9, 0x6, 0x1, 0x101, 0x8, 0xf4, 0x10, 0x8c0, 0x0, 0x6, 0x2, 0x3, 0x68, 0x800, 0x100, 0xfffffffd, 0x4, 0x6, 0x960, 0x2, 0xaa14, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x7, 0xeb, 0x458, 0x8, 0xafdf, 0x5, 0xa1, 0x3, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x71be, 0x80000000, 0x0, 0x1472, 0x9, 0xe, 0x5, 0x7, 0x0, 0x400, 0x5, 0x8001, 0xfffffff2, 0x7ff, 0x8000, 0x7, 0x5, 0x200, 0x2, 0xa, 0x3, 0x1000, 0x8, 0xfffff3ce, 0x3, 0x3, 0xdd02, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x3, 0x5, 0xef89, 0x9, 0x9, 0x2, 0x7, 0x7, 0xa6fd, 0xca, 0xf4d, 0x0, 0x7]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x8, 0x9, 0x6, 0x3ff, 0x6, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6, 0x10, 0x3cf9, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x4, 0x271, 0xd, 0x5, 0x2fd531d1, 0x5, 0x2d66d320, 0x9, 0x7, 0x1180, 0x8, 0x21d, 0xffff, 0x2, 0x2, 0xd, 0x8, 0x10001, 0xa, 0x400, 0x8, 0x10, 0x1, 0xffffffff, 0x11, 0x1, 0x2, 0x4, 0x5, 0x1, 0x6, 0x40, 0x8, 0xf, 0x0, 0x59f, 0x2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x0, 0xd84, 0x7, 0x7, 0x4, 0xa8e, 0x80000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, 0xffffffff, 0x75, 0x7, 0x9, 0x10, 0x2, 0x7fffffff, 0x7149, 0x7f, 0x8, 0x7, 0x7, 0x0, 0x2, 0x800, 0x6, 0x8, 0x400, 0x7f, 0x8, 0xffffffff, 0x762, 0x3, 0x3ff, 0x27, 0x6, 0x8, 0x10000, 0xa, 0x5ef2, 0xa, 0x4980c02b, 0x0, 0x100, 0x80000000, 0x1, 0x2d7, 0xfffffffe, 0x5, 0x5, 0x5, 0xa4f, 0x2d, 0x3, 0x100, 0x7, 0x7fff, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x0, 0x6, 0x8, 0x7, 0x4, 0x5, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x6, 0x2, 0x8, 0xaa7, 0x204, 0x5, 0xef95, 0x3, 0xfffffffa, 0x6, 0x80, 0x0, 0x97, 0x1, 0x9, 0x7, 0xfffffff7, 0xc, 0x8, 0x7, 0x0, 0x2, 0x8, 0x2, 0x3, 0x8, 0x1, 0x7b8ecc7c, 0x10000, 0x7, 0x7, 0x783a8000, 0x9, 0x4, 0x85, 0x5, 0xabe, 0x1, 0x3, 0xa6, 0xff, 0xb, 0x7f, 0x2, 0x917d, 0x825, 0x45, 0x5, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0x7, 0x10, 0x8, 0x4, 0xffffff71, 0x4, 0x14, 0x7, 0x0, 0x0, 0x6, 0x485, 0x8, 0x8, 0x2, 0x2, 0x9, 0x5, 0x9, 0xffff0001, 0x2, 0x9, 0x40, 0xddfb, 0x7, 0x2, 0x401, 0x9, 0x4, 0x8, 0x8, 0x7c, 0x0, 0x0, 0x9, 0x3, 0xd, 0x2, 0xfffffffd, 0x4, 0x4, 0xf4ab, 0x200, 0x200, 0xb, 0xe3, 0x4010001, 0xd420, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x7, 0x1, 0x3]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r3, 0x0, 0x0, 0x80000) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) r2 = fanotify_init(0x200, 0x0) fgetxattr(r2, &(0x7f0000000340)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) fanotify_init(0x200, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x121f, &(0x7f00000000c0)={0x0, 0x4ae5, 0x200, 0x3, 0x17a}) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) fstat(r1, 0x0) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) syz_io_uring_setup(0x5090, 0x0, 0x0, 0x0) (async) unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) (async) unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5] detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="2e6f02666724eeadf4b703be16cce07579d0b46f5032605e9e32a5fa3d1f5af4f58a709938c268111576fa6c6c07ccca95dc8902c69a39e01e1ce988c8ed25d9f8a84e92ac38d914ace5614717f26ff0070b", 0x52}, 0x1, 0x0, 0x0, 0x8840}, 0x4010) (async) unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5] detailed listing: executing program 0: unshare(0x62040200) (async) executing program 1: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x6, r1, &(0x7f0000000000), 0x0) program crashed: WARNING in ip6mr_free_table minimized 21 calls -> 1 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4] detailed listing: executing program 2: unshare(0x62040200) (async) executing program 0: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3] detailed listing: executing program 2: unshare(0x62040200) (async) executing program 0: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2] detailed listing: executing program 2: unshare(0x62040200) (async) executing program 0: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1] detailed listing: executing program 2: unshare(0x62040200) (async) executing program 0: syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') program crashed: WARNING in ip6mr_free_table testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 0] detailed listing: executing program 2: unshare(0x62040200) (async) executing program 0: program crashed: WARNING in ip6mr_free_table minimized 5 calls -> 0 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare detailed listing: executing program 0: unshare(0x62040200) (async) program crashed: WARNING in ip6mr_free_table bisect: concatenation succeeded found reproducer with 1 syscalls minimizing guilty program testing program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare detailed listing: executing program 0: unshare(0x62040200) program crashed: WARNING in ip6mr_free_table extracting C reproducer testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table simplifying C reproducer testing compiled C program (duration=1m28.447659676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program did not crash testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program did not crash testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table testing compiled C program (duration=1m28.447659676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare program crashed: WARNING in ip6mr_free_table reproducing took 1h37m8.600592218s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5838 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419 Modules linked in: CPU: 0 UID: 0 PID: 5838 Comm: syz-executor358 Not tainted 6.12.0-syzkaller-12089-gcfd47302ac64 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419 Code: e8 9d 2f ff ff 49 8d be 98 0e 00 00 31 f6 31 d2 e8 1d e2 45 fa 4c 89 f7 5b 41 5c 41 5e 41 5f e9 1e c7 79 f7 e8 f9 26 1b f7 90 <0f> 0b 90 eb c0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 72 ff ff ff 48 RSP: 0018:ffffc900036f7af8 EFLAGS: 00010293 RAX: ffffffff8a844a97 RBX: 0000000000000001 RCX: ffff888034ac0000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff8a844a2a R09: 1ffff1100cd357b8 R10: dffffc0000000000 R11: ffffed100cd357b9 R12: dffffc0000000000 R13: dead000000000122 R14: ffff88807ac24000 R15: ffff8880669acb40 FS: 00007fd1f733f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffecdb06b98 CR3: 000000007ac8e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip6mr_rules_exit+0x18f/0x220 net/ipv6/ip6mr.c:283 ip6mr_net_exit_batch+0x4a/0x90 net/ipv6/ip6mr.c:1388 ops_exit_list net/core/net_namespace.c:177 [inline] setup_net+0x829/0x9e0 net/core/net_namespace.c:394 copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500 create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228 ksys_unshare+0x57d/0xa70 kernel/fork.c:3334 __do_sys_unshare kernel/fork.c:3405 [inline] __se_sys_unshare kernel/fork.c:3403 [inline] __x64_sys_unshare+0x38/0x40 kernel/fork.c:3403 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd1f73842d9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd1f733f238 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fd1f740e308 RCX: 00007fd1f73842d9 RDX: 00007fd1f73608c6 RSI: 0000000000000000 RDI: 0000000062040200 RBP: 00007fd1f740e300 R08: 00007ffecdb06bb7 R09: 00007fd1f733f6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1f740e30c R13: 0000000000000000 R14: 00007ffecdb06ad0 R15: 00007ffecdb06bb8 final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5838 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419 Modules linked in: CPU: 0 UID: 0 PID: 5838 Comm: syz-executor358 Not tainted 6.12.0-syzkaller-12089-gcfd47302ac64 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419 Code: e8 9d 2f ff ff 49 8d be 98 0e 00 00 31 f6 31 d2 e8 1d e2 45 fa 4c 89 f7 5b 41 5c 41 5e 41 5f e9 1e c7 79 f7 e8 f9 26 1b f7 90 <0f> 0b 90 eb c0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 72 ff ff ff 48 RSP: 0018:ffffc900036f7af8 EFLAGS: 00010293 RAX: ffffffff8a844a97 RBX: 0000000000000001 RCX: ffff888034ac0000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff8a844a2a R09: 1ffff1100cd357b8 R10: dffffc0000000000 R11: ffffed100cd357b9 R12: dffffc0000000000 R13: dead000000000122 R14: ffff88807ac24000 R15: ffff8880669acb40 FS: 00007fd1f733f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffecdb06b98 CR3: 000000007ac8e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip6mr_rules_exit+0x18f/0x220 net/ipv6/ip6mr.c:283 ip6mr_net_exit_batch+0x4a/0x90 net/ipv6/ip6mr.c:1388 ops_exit_list net/core/net_namespace.c:177 [inline] setup_net+0x829/0x9e0 net/core/net_namespace.c:394 copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500 create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228 ksys_unshare+0x57d/0xa70 kernel/fork.c:3334 __do_sys_unshare kernel/fork.c:3405 [inline] __se_sys_unshare kernel/fork.c:3403 [inline] __x64_sys_unshare+0x38/0x40 kernel/fork.c:3403 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd1f73842d9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd1f733f238 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fd1f740e308 RCX: 00007fd1f73842d9 RDX: 00007fd1f73608c6 RSI: 0000000000000000 RDI: 0000000062040200 RBP: 00007fd1f740e300 R08: 00007ffecdb06bb7 R09: 00007fd1f733f6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1f740e30c R13: 0000000000000000 R14: 00007ffecdb06ad0 R15: 00007ffecdb06bb8