Extracting prog: 1h8m17.931343416s Minimizing prog: 1h48m30.772665432s Simplifying prog options: 8m41.989173787s Extracting C: 4m53.600384383s Simplifying C: 1h4m12.964451587s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fchdir-fanotify_init-openat$dir-fanotify_mark-prctl$PR_SET_MM_MAP-socket$inet6_tcp-syz_open_dev$sndpcmp-ioctl$SNDRV_PCM_IOCTL_HW_PARAMS-ioctl$SNDRV_PCM_IOCTL_PREPARE-ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES-ioctl$SNDRV_PCM_IOCTL_DRAIN-timer_create-fcntl$lock-mprotect detailed listing: executing program 0: fchdir(0xffffffffffffffff) r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_MCAST_RATE-socket$inet_udp-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-socket$inet_udp-socket$inet6_sctp-sendmmsg$inet-socket$kcm-sendmsg$kcm-socket-connect$inet-bind$inet-epoll_create1-sendto$inet-sendto$inet detailed listing: executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x8, 0x9fe5, 0x6, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x84, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}, {&(0x7f0000000200)="34e9833c66db7eb1a94c2a48bc034e7c48f00636d4", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070be8", 0xdf}, {&(0x7f0000000380)="465b7ce86edd201731b7de8dfb8c86c07e9262726f30416e1343a746ec304ecfc21a35c9b9a7b2e9af115b31720a7be091805ad9866eb4920851389e51", 0x3d}, {&(0x7f0000000700)="faaadc2a8830493523b454cfed9d18fc6dc097816a8ebd5174e0d3de49c78bf70116b3164415a3049a99bdb929e79da9b8ed4b59e587078531dc4dfbf364ec73ffff2a72c89ea2064233876984e32b930b4172833d99be8a790388c6c87531962b25452a7dcce2916d9b235987af70c3b06d68476be87d5c15cc34e0558b98587134d2eaf743a3e916960c776062ced1b2a0c27b13ce43f9192c504ad77d11100673d2290aedfdfcd6d8937a17ad535b5475ec1d2a27281a854e18ca9f81a211c2e404fa7176387ef55146f3d37253288784169a539c380e6bef7dbdadd0444e929566c370d050", 0xe7}, {&(0x7f0000000800)="7c4ee393a29ff34a58c9c34958e6280d99fa119eb15e6257aeac12b63c53ef1e9a5b956d5408bd24d965be3e34967aabb6bd75eaceaea95447afcbcab62343ed4d2b96a2a42aac707db2ed362aa9e91daf5d6600f7e21e565c14826fa3c475d5b360975580586f9a9f55c98bd7dacfd775f8258da52b10d36e7b326882fd0f53f5c1bfa266ff7fa395688f3490275a6036287520f2060b7f90415bf9edf676281f42d8998fea81664e8825156164057f9686a5335c32cdf052e305e5b8c2cbf8374da3c2ca0057a916287938f4e561a16fc49cd6fe75729abb48991395053b9c80cfa92c7c2f988363975de3e569bf64658a9a195f8377564730d01d55f0c0559e8e19df424fc97327e61e4957bf25583ece8782e5c910c88479bb0966daa5b0b286308862715b55905347a8e2997dcc740f541f3ec72a1046e326b7f2008a4ae73679c145e5b0eb6137def197ace5662266388d15a2d8e572620d8f53d48ac8898f707c775dea135006f1acf8d40eabf868b467421e706c085fec4af66598214b55cb03d76cb608d5852e48ad97a013ee8e7f79cc4e9c295c83b3e81a172ee0911375711457f37f7f8f6ccdc18c987c6b52c9411d721514728ffba953fb238ff8990f6bfbd164631c78282f6384a55c65d271fd4a79701b5a8490c1a3dc63bdb73cf87d2c8a0eca0bf01b840ad8a924b317dc208ddffd6935035ad8f7b4adb97d91dae5f1dd95885dba02fa2742edbd2b772193f6f0a25c88a1eab588b8ac8a94924a08dd3a3ffce5afa0e323eb29bd7b5207d3992556605002ca7f26d8ebc4bf4882a748c64c40ab9a7f5fc55eef07089506be10d87b17aed1082e625de261b506fadb2d08ed31ae36ab66757ce124c29b2e21dadab498bf62bd2d00e7f3a9068ed5096fff424ad2c69d21e070104fdec13f9ab280c1fdb7a04fe56cf085ee3f843024a378bf1adc49b9de920434dd3df8146c5333ad509301fe0f9237614cdd02a84a998d0cb56a3b1bd28423d399871e27b4970ca5d3de4ee1aa2c72d89a1e2475d8fcca1d0583e9b920e8fe3d9ae52c5ceb84370a9e0c67e9097a8101c8668bb06b0b0e464bf25b19bc3dfc33433f23c43617bfcee76b629fbabcf23a250bcf39eb934e99b88402d9de9bea5a1c4f3069497d4fd4fa457fc235e95e88a98d257f830231a8b9f8ade5afe9e63c504e5a61e12bbf1d93707cb7d44f86b48e962174490dda4ba2fdcd1b5fee87b520303c88dfa53dd071aa693f11401a2d94aaf3239193362f44eb060b9fc67db467b85aad14d19a10892df97d90226bbaf8855883857f636b23359691e6915157a855781246c77b5e317cead80db21cccbe6dae748cc93d46fe5785aef7e4a0e259b49169ea680af91414568611371d451fee5322fe214e147a580d968e42cd86c6299e9e422699f3798937d2d33816decfae5b9d714277b7892d7834aa9513fd6c1b30cdcdde2123b8dbed046db8618c2cdd4f8ec0087c23ea5f9491023f624fa0f87ccc84650469f33d15c37dbbfea8125847ae96d38c1adfeb6103cd0e92833bc069460d63ff9bddbd5286dd64969fbae1293f53bfc0477a4e7377de173d44df05b7b56b39af36d443e882a4189b1249b37a446619e43ab6214a4d63fc69d8a9e7b2c6bcb6ea968047b5863178b14274af3a02f5da1ddabc24ad5843ef1272c38d8c16945dfa7a1af53ec5f34374b30cae4f533f4eb4ad0d6827504e8a94408e5a9ccf4f667ed6066014b2aedfd749e8e88a9bd9eaaa54ccdab1786781486c24e02eedd57fe34ccc1aa8f2027ec7bcc54b59c241bbe5b3d0c2421564d76df41cc7c2c8f1a4f0c74a8a2c87c6e1f65fda6fc37a675bead68df4f6c088918bfa144a040425ccad4f0239403fbe7517fc6ec56e54c84e820aecddf635ab7bf8998e3eb53232cedd2a2646d56a7d4e105beac770d5511ba94b8d39d70fc4d997d9dfdda65f57138da7b3ddee2e34d1526250af3fa349b9d268bbd61dc61d8e73b7627a1dc3c2b6eddf8036e48036c2841365ce6635c8ee5fa48e2e2d656f18b40190ce111c2db5f8b14b39dc82a8caa3a108e401d5246fa99d78e7109eb37bf994e348372ef97d1f265777a7389169b729eb817d2d638696c3c20c6cb4792c933e0143969f6c74fb3482c558429bd23c40f27d64b46d38ea078262ac8e8454d56f113e5da08abd19172fba9b50c881a42c62ca3c4e912eebee1fd039236c67c450146cd9aee27155ffeae47a07f7a5d7aae8676d032574e127a80fd0ce818cfbdd250c63b07b6242fc9324afca6ec25ac848eadc2775a98567589e7b7fff904c7d761a943eb4723f61267b3d44c72565c4b72e6b6667d3367807486ef06d9620f25bcc7bc3094d22c6a5d09a9b811c378510a928b3974ed0cdcae139b18fc945c0d3cf147499c8893d61e1b40ac906b76ee3b90e65dbedfd72ffbeb0bb99e60e83a6c09a6d0ed3a67ee16069b4b74e8e42485d8d9e48ddb7d647a2c40a34fa4160109d483ae44d1c160a78929e2c2a6e08ee3c458b7a8a4eb7582f1e9b31ad45ffce7f94f91268b305fcc0289fd2f807e21e61929def3f6a267f560beada5cc23286fe9a8cb50f05f14f3382e70343b0ac389f07b3998dc621da9c5ce2884012fb8b1755428309c0ae425002d34d4949c1297fcfa46b611512bfd63914a2dbb6778f0ab2cdcb6671d0f284264261f6f027ec3a94fb9a9f49cc561c3bc6d6521f7a0ebc329132152338b248872d6685928eb7c92144118c570fa39c0645167ab5c5c4c6dc5b817579f714a04bb7009f242f8744a465904213177638f079e361e0974b891966786994b150eeede48ceb495e32e664e426e13c6155fe2786432a06f0bd6521505436bc370c2b23fbcdb90ea62e77d3112843f1ab4437dd02b6e12cffd6ff587241723b99f035b1c665d44e4ee4d054b868bb052bec0d5fdb1bcb8dea2b558f8b1a0e65c29d278f9c539186adb4032cfe124bd3c7febbe8fb149782b2efce3f742794c248e632dff7b4c5800578efcbc27b6e104210eedf862723b95aff861f5961857845cc5b26029546071942cc5944fcb75590a02ba892a925470594c6e8776def9e34b0d023336cadfc08e27cbf5806143dcb48821609b96162b89b1a799ca65388ea33536674077143fdafa1ed520506dcd196901f4b484c1c9a4a1b8358d8cfa43993b47db79e492597c6b7ef813aaee29cf9bfdf5b7aaddea42badaa6d3149a7e232ef99a8a27aaf169ae618b89f2504871946ddb2c41279e17543ec6cd9b280538df941a7086e4f0fb8e564345f3ee53b58a1f04aad7457f50e7e3d638c0e3ae68c56c21629aa0ed548b9f4d868d2e5ad656231c49794f2974bfc3d104b2f61dd3f905a1526839f70ee355ab9fe754c1b7704ce10a5fac44f840ce8dd2b2e730c03398eb17f2e05d7bc91240e98ccabf89bd845005f57788e18dc580f5402a8a5c42312abd55ad280a49b798105331079d10db2ac737fa8882037be4262c6c27f1b4a55645203238b386bbfe5fdbc6648c06d670850bee9d208626fb9b976d6ce56bcd38142387409d5df171df7219bfa56ce7a540abec33453f94922965de794e480ec45e00d3b966e4cf2bcfa89584b7e3935b023584074dd7741992e191d182765fedd52e84200261aa87cafedcaf78c7d722508e9059b98d14bdc9df4f0352945857c36f7d389dc73636444c96f8fe5b3dd05402f9acc3b6a09480e250af2d9885dff7da53b210f1e0e66543ddba6141d9310f65282756f47a79c2c390f3c5029cb34e5f348a91fd8c55099305a601a6214aa7d0c19302d4b1d3f1dfe8e491f2a749992e5052d9144da6a5a27c9a661ad1e2742580dc24fe310a016c77cf6acb0046771f4842178ebfa39b07208d36efbd07c870b5d231258c4206a760133a3e770fd4e58d82b9f62a66c700e0776f9fe4f7ca7893d08cfbd56840d96554ccb7a01e70107c7a5b012524f36d3292f17fa8aa6a742c6d7b0e7e9991082748c9ee5ae3d226656f015caca46a00beab3a947b0462a6f828d1ca973814b53275dab0a35116e2e80cc538752858b8090e9f408a00029159bfe3786e094adebaba27f7f5c8080f04635b25323a96e12ad2339b63b2112f787b164fb8be719d490689f55c49c7e46613b5bd47b07db127568de407379a93ce956285d3b515fd417e7b7dc783e548ce261e92124861103abf3ab51ef0b2e857d502acf55269abc040937bbc245aae2c8fcf7aa9d0e1662e2f4fb7ac1a9613643092e60c92568247f0b0cfdac50ab8ce31ab536675ded166e9d0be9e8cf54c7e6f008f772fa6e19b4cc990caa25d77a09e2a4483f5bb81d0f27597e277566aa8fe7dd6f55b416f85345796c5fdca9caceff4270cde65576cb35fa06edfefc0b395f52848383bd76d940707cc9f27f9f78586c33c76ba3e74e7d2c265e3fcf3262d3c59caae9e27214756ae14e810e65ab094a2a43da1e06372adbb53080d9c06423acf3ed51c28b2bd58837948d0954f8adcc0c773ad4e3cc1ce5117bcd8584e1fa0ca6b019fccb479fae63bdaa707cc6c5c98bc1801acf64fd9a94e1b86def581dccf36a32ac1cf5857c08506cb16aa68c6f3835a96375621826cbcbb9972c5838439f46c948259f321dc7afa69da9df63e2f3b16356c3849a6e20a72a5cc4bd1066d275855c7b5f8dc87f827bb45af47735e362cc2137bf1579b833ed7de53c59c6b4e956223414bbd75ee69969ebcc07d3d7a806271fcbc2404ae9e6e807ede1570791385d56a96e1d6a033b56d437d8c1f8f0f492c4edd33fc0f9717cbca74716c3b8d402f83419f72e0d604696d813e617ece0bd0ca12c6ff487f5c3d53d5bf134c3535d9393d60f89f252e62fb17aee763a8d5cad3ed41d397dbffc8ce21457408ec38dfc4177261a22e9fc055034815f2c3c998cb43ca84f64e7bf0c7bfe4caa206f6cc671e37cf71562a9b4240b70ef9cd844593f2f3bb72a6264381b0a87fa1f4f7ef3dd026eeb674afff967b30cbfa621dbbd8e7d73914059e3870008c11e4511376eaa3b76e65efbb73e26a7328a588788086f0bdfb78bb00031ab1e478b09fc892540f7d03bfddecf46e1340363c2ffb805281036980847cfadf4fa689dfd112aa72bd7bfed9a9472cb21a218bf657e4ecbf3b457053958033dc53fd033f25e0d469086e0eae5d1eb859f4b90551e70f2121f8d981fa3740bd57db5823ccb02d911511b98cfd131bf92d47fccbf1a18c928c88ddcfc88ef5e208e03fe72faf70436eeaf51e72bfd5e75e44e481fab31aadb796e9e855af21c5ed915d12c490faeae011e1df6d0734d6a16c6288f853e75a3f04d99ac77ee230dd8d1fe5e405f636f2fc866cf4534b75ce6e817ff34f4334a10c314e9b8eccee0f3745abdd8a2ed235d3ce1313bb0d5a94dca", 0xeff}, {&(0x7f0000001800)="2fa160058b4518fbbd50a79975b3f20a26517fe73ce5ba4881101bcce13775005ee3adc8a33e92887536b1451476ccb2604feead522ae6f48e72db8ae47a6b09c8b3d5abd6183f212df2b7d2f5342b38c17eebb77f5762ce357fd70e11cd16ccca69ba3972c08a81205d16fc872c2f", 0x6f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d08018000000000000000000000000000100000007000500"/112], 0x70}}], 0x3, 0x2000c844) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$inet-ioctl$sock_inet_SIOCSIFFLAGS-sendmsg$nl_route_sched-sendmsg$nl_route_sched-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1 detailed listing: executing program 0: syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004"], 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8, 5, 5, 8, 11, 11, 8, 6, 15, 6, 4, 1, 4, 5, 5, 8, 3, 28, 17, 3, 4, 8, 5, 4, 11, 9, 20, 14] detailed listing: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @random="6a151a5250dc"}, 0x0, @random=0x3b, 0x4811, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x4, {0x9, 0xf8, 0x7, "ff"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x4]}, 0x8, 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r0}, &(0x7f0000000100), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) executing program 4: r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0xffffffff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="00004528bb5446b91ac2c8b295227b", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000003c0)=""/233, 0xe9}, {0x0}, {0x0}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40000102, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[], 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) write(0xffffffffffffffff, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a0000", 0x21) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) executing program 1: mkdirat(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f00000005c0)=""/240, 0x26, 0xf0, 0x1}, 0x28) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200808c0, 0x0, 0x0) socket(0x10, 0x803, 0x0) executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="bcb0b6080bc2", 0x6}, {&(0x7f0000000340)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000000380)="d746bf7de7b2afdb11cbe10dfdcec916cee4726e50a324c76a37f53ceb1788945f3848c7930de354e8e58262d906f3ba0e15dc0af8d852598483c089bb370efda83b216c8279f427e422dc94e30b2af886dc00838d47d041f709bfd92b1f550848664866ba107bba9cf40e42f727bb0bdb58795b0f331197b43c538f4e73f44ec5c8802233237cd59be4dea6efd1cb8f45e43c7d80bef22276d81cc1b63f891539df2fa962ad242ef318a011cdfc98aace3735ad6c7174feea983eef0067c9670d2776a4eb35234d1ebf2374cc199d911a61478aaf312787bc1b562b08b1d16fc2174cea0cdc4f6e2c7caeb61c6884fa4aa8c8afcf0a7472256fbea830c51107c24d03045c6b604c066076bd16e395b2ce26be15ff4248b906a301777820affdaa37c38ffe5c6cadae4b47566406c0a62f31786ec163f3253e675679d3a7fdf472bb68fbb4e4bd59dab659d6c4b3798f4276a35d2b19a31c3a53022d700f3f82", 0x160}], 0x3}}], 0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000e40)=""/4096, 0x1000, 0x40010120, 0x0, 0x0) executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 4: syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004"], 0x0) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x11c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_ACT={0xec, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x8c, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x36, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x6000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) executing program 3: r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0xffffffff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="00004528bb5446b91ac2c8b295227b", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000000000000001000000"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r7, @ANYRES64, @ANYRESOCT=0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x39, &(0x7f00000000c0)={0x0, 0x2c}}, 0x40891) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) unshare(0x600) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8, 0x4b2, 0xffffffff, 0xb, 0x2, 0xffffff7f, 0x2}, 0x1c) executing program 0: sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @remote}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0xfff}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) executing program 1: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x8, 0x9fe5, 0x6, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x84, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}, {&(0x7f0000000200)="34e9833c66db7eb1a94c2a48bc034e7c48f00636d4", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070be8", 0xdf}, {&(0x7f0000000380)="465b7ce86edd201731b7de8dfb8c86c07e9262726f30416e1343a746ec304ecfc21a35c9b9a7b2e9af115b31720a7be091805ad9866eb4920851389e51", 0x3d}, {&(0x7f0000000700)="faaadc2a8830493523b454cfed9d18fc6dc097816a8ebd5174e0d3de49c78bf70116b3164415a3049a99bdb929e79da9b8ed4b59e587078531dc4dfbf364ec73ffff2a72c89ea2064233876984e32b930b4172833d99be8a790388c6c87531962b25452a7dcce2916d9b235987af70c3b06d68476be87d5c15cc34e0558b98587134d2eaf743a3e916960c776062ced1b2a0c27b13ce43f9192c504ad77d11100673d2290aedfdfcd6d8937a17ad535b5475ec1d2a27281a854e18ca9f81a211c2e404fa7176387ef55146f3d37253288784169a539c380e6bef7dbdadd0444e929566c370d050", 0xe7}, {&(0x7f0000000800)="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", 0xeff}, {&(0x7f0000001800)="2fa160058b4518fbbd50a79975b3f20a26517fe73ce5ba4881101bcce13775005ee3adc8a33e92887536b1451476ccb2604feead522ae6f48e72db8ae47a6b09c8b3d5abd6183f212df2b7d2f5342b38c17eebb77f5762ce357fd70e11cd16ccca69ba3972c08a81205d16fc872c2f", 0x6f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d08018000000000000000000000000000100000007000500"/112], 0x70}}], 0x3, 0x2000c844) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) executing program 0: fchdir(0xffffffffffffffff) r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program crashed: INFO: rcu detected stall in do_idle bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 6, 4, 1, 4, 5, 5, 8, 3, 28, 17, 3, 4, 8, 5, 4, 11, 9, 20, 14] detailed listing: executing program 1: mkdirat(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f00000005c0)=""/240, 0x26, 0xf0, 0x1}, 0x28) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200808c0, 0x0, 0x0) socket(0x10, 0x803, 0x0) executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="bcb0b6080bc2", 0x6}, {&(0x7f0000000340)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000000380)="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", 0x160}], 0x3}}], 0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000e40)=""/4096, 0x1000, 0x40010120, 0x0, 0x0) executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 4: syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004"], 0x0) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x11c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_ACT={0xec, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x8c, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x36, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x6000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) executing program 3: r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0xffffffff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="00004528bb5446b91ac2c8b295227b", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000000000000001000000"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r7, @ANYRES64, @ANYRESOCT=0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x39, &(0x7f00000000c0)={0x0, 0x2c}}, 0x40891) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) unshare(0x600) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8, 0x4b2, 0xffffffff, 0xb, 0x2, 0xffffff7f, 0x2}, 0x1c) executing program 0: sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @remote}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b08933865e3e154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x2001}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0xfff}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) executing program 1: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x8, 0x9fe5, 0x6, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x84, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}, {&(0x7f0000000200)="34e9833c66db7eb1a94c2a48bc034e7c48f00636d4", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070be8", 0xdf}, {&(0x7f0000000380)="465b7ce86edd201731b7de8dfb8c86c07e9262726f30416e1343a746ec304ecfc21a35c9b9a7b2e9af115b31720a7be091805ad9866eb4920851389e51", 0x3d}, {&(0x7f0000000700)="faaadc2a8830493523b454cfed9d18fc6dc097816a8ebd5174e0d3de49c78bf70116b3164415a3049a99bdb929e79da9b8ed4b59e587078531dc4dfbf364ec73ffff2a72c89ea2064233876984e32b930b4172833d99be8a790388c6c87531962b25452a7dcce2916d9b235987af70c3b06d68476be87d5c15cc34e0558b98587134d2eaf743a3e916960c776062ced1b2a0c27b13ce43f9192c504ad77d11100673d2290aedfdfcd6d8937a17ad535b5475ec1d2a27281a854e18ca9f81a211c2e404fa7176387ef55146f3d37253288784169a539c380e6bef7dbdadd0444e929566c370d050", 0xe7}, {&(0x7f0000000800)="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", 0xeff}, {&(0x7f0000001800)="2fa160058b4518fbbd50a79975b3f20a26517fe73ce5ba4881101bcce13775005ee3adc8a33e92887536b1451476ccb2604feead522ae6f48e72db8ae47a6b09c8b3d5abd6183f212df2b7d2f5342b38c17eebb77f5762ce357fd70e11cd16ccca69ba3972c08a81205d16fc872c2f", 0x6f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d08018000000000000000000000000000100000007000500"/112], 0x70}}], 0x3, 0x2000c844) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) executing program 0: fchdir(0xffffffffffffffff) r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program crashed: INFO: rcu detected stall in worker_thread bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 3, 4, 8, 5, 4, 11, 9, 20, 14] detailed listing: executing program 0: sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @remote}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b08933865e3e154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x2001}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0xfff}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) executing program 1: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x8, 0x9fe5, 0x6, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x84, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}, {&(0x7f0000000200)="34e9833c66db7eb1a94c2a48bc034e7c48f00636d4", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070be8", 0xdf}, {&(0x7f0000000380)="465b7ce86edd201731b7de8dfb8c86c07e9262726f30416e1343a746ec304ecfc21a35c9b9a7b2e9af115b31720a7be091805ad9866eb4920851389e51", 0x3d}, {&(0x7f0000000700)="faaadc2a8830493523b454cfed9d18fc6dc097816a8ebd5174e0d3de49c78bf70116b3164415a3049a99bdb929e79da9b8ed4b59e587078531dc4dfbf364ec73ffff2a72c89ea2064233876984e32b930b4172833d99be8a790388c6c87531962b25452a7dcce2916d9b235987af70c3b06d68476be87d5c15cc34e0558b98587134d2eaf743a3e916960c776062ced1b2a0c27b13ce43f9192c504ad77d11100673d2290aedfdfcd6d8937a17ad535b5475ec1d2a27281a854e18ca9f81a211c2e404fa7176387ef55146f3d37253288784169a539c380e6bef7dbdadd0444e929566c370d050", 0xe7}, {&(0x7f0000000800)="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", 0xeff}, {&(0x7f0000001800)="2fa160058b4518fbbd50a79975b3f20a26517fe73ce5ba4881101bcce13775005ee3adc8a33e92887536b1451476ccb2604feead522ae6f48e72db8ae47a6b09c8b3d5abd6183f212df2b7d2f5342b38c17eebb77f5762ce357fd70e11cd16ccca69ba3972c08a81205d16fc872c2f", 0x6f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d08018000000000000000000000000000100000007000500"/112], 0x70}}], 0x3, 0x2000c844) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) executing program 0: fchdir(0xffffffffffffffff) r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program crashed: INFO: rcu detected stall in worker_thread bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11, 9, 20, 14] detailed listing: executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x8, 0x9fe5, 0x6, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x84, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="fa7acba42911b64cd4c2202966bf36296631bfaa25afa4d9ce0f01d8cf7213868d6722a4f8b1c4c7a67b1e5f2796b923819c9ea6c6bd0c074287038497875db72ea88160b87207c1bb0fc8fbd598c7b1fc3ac16949a0b8e4722b0be64ad06262d28c9e78ea84b4aad2e3aef82e39d54ad47fd309a4422bee776e0ed4c6c9ff655498d367414af1213018a15f12b8ab190ca29191e1c137b0b8f44033464aed29811ee6", 0xa3}, {&(0x7f0000000200)="34e9833c66db7eb1a94c2a48bc034e7c48f00636d4", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="24070738d19de8caf41d157efe5a9fb611f44731927714b72388ed72508702377f648162e0204bf83fbb2bae7b95a87f4caa8fc164fd440b64b81ba4bd9e48ebf1a5b7180c5f2966ed512672b9ff39d087c168507e9d150f1df86b010afbd0608dbcb7c9b3030dffd8aa27fb09e6708288df083449df500396a7d73523a9e62bf16fa182707852ad3610595421f9eeebb773c2be4a6457923db66dac8a1c65485d3de506433cd391871230520743a5f8f325a4dec728dfef77b8cb5f54be25b5f3f7e8eac41a0b7fe57b58c1028272200480b773759ee9f1b1528c8b070be8", 0xdf}, {&(0x7f0000000380)="465b7ce86edd201731b7de8dfb8c86c07e9262726f30416e1343a746ec304ecfc21a35c9b9a7b2e9af115b31720a7be091805ad9866eb4920851389e51", 0x3d}, {&(0x7f0000000700)="faaadc2a8830493523b454cfed9d18fc6dc097816a8ebd5174e0d3de49c78bf70116b3164415a3049a99bdb929e79da9b8ed4b59e587078531dc4dfbf364ec73ffff2a72c89ea2064233876984e32b930b4172833d99be8a790388c6c87531962b25452a7dcce2916d9b235987af70c3b06d68476be87d5c15cc34e0558b98587134d2eaf743a3e916960c776062ced1b2a0c27b13ce43f9192c504ad77d11100673d2290aedfdfcd6d8937a17ad535b5475ec1d2a27281a854e18ca9f81a211c2e404fa7176387ef55146f3d37253288784169a539c380e6bef7dbdadd0444e929566c370d050", 0xe7}, {&(0x7f0000000800)="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", 0xeff}, {&(0x7f0000001800)="2fa160058b4518fbbd50a79975b3f20a26517fe73ce5ba4881101bcce13775005ee3adc8a33e92887536b1451476ccb2604feead522ae6f48e72db8ae47a6b09c8b3d5abd6183f212df2b7d2f5342b38c17eebb77f5762ce357fd70e11cd16ccca69ba3972c08a81205d16fc872c2f", 0x6f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000000000000000000001000000e700000000000000140000000000000000000000020000000b0000000000000028000000000000000000000007000000070762ac1e01014410d08018000000000000000000000000000100000007000500"/112], 0x70}}], 0x3, 0x2000c844) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) executing program 0: fchdir(0xffffffffffffffff) r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 3, 4, 8, 5] detailed listing: executing program 0: sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @remote}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e22, 0x16cc, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0xfff}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) executing program 1: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in compat_sys_socketcall bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 5] detailed listing: executing program 1: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in compat_sys_socketcall bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in x64_sys_call bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in corrupted bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, 0x0, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash testing program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program did not crash extracting C reproducer testing compiled C program (duration=8m29.844627212s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in corrupted extracting C reproducer testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread simplifying C reproducer testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in smp_call_function a never seen crash title: INFO: rcu detected stall in smp_call_function, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: BUG: soft lockup in smp_call_function a never seen crash title: BUG: soft lockup in smp_call_function, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: BUG: soft lockup in smp_call_function a never seen crash title: BUG: soft lockup in smp_call_function, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in smp_call_function a never seen crash title: INFO: rcu detected stall in smp_call_function, ignore testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread testing compiled C program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in corrupted testing program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in sys_newfstat validation run: crashed=true testing program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true testing program (duration=8m29.844627212s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCGIFINDEX-socket-sendmsg$nl_route_sched-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) program crashed: INFO: rcu detected stall in smp_call_function validation run: crashed=true reproducing took 4h25m7.659852113s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=7fc4/1/0x4000000000000000 softirq=17445/17445 fqs=1 rcu: (detected by 0, t=12680 jiffies, g=17669, q=472 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 1013 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: writeback wb_workfn (flush-8:0) RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:146 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x24b/0x2c0 mm/kasan/generic.c:200 Code: 0f 85 82 00 00 00 49 c1 ef 30 bb 07 00 00 00 45 84 ff 75 7d 4d 01 f3 49 01 db 4d 89 dc 4d 85 db 74 84 4d 01 d1 4d 39 cc 75 11 <41> 83 e0 07 45 0f be 09 45 39 c8 0f 8c 6b ff ff ff 0f b6 d2 e8 3c RSP: 0018:ffffc90000a18c08 EFLAGS: 00000046 RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81a3ebfb RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a18c80 RBP: ffffc90000a18ce8 R08: ffffc90000a18c83 R09: fffff52000143190 R10: dffffc0000000000 R11: fffff52000143190 R12: fffff52000143190 R13: ffff8880282662b0 R14: fffff52000143191 R15: 1ffff92000143190 FS: 0000000000000000(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005556b123ba38 CR3: 000000007f2dc000 CR4: 00000000003526f0 Call Trace: instrument_read_write include/linux/instrumented.h:55 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1301 [inline] queued_spin_lock include/asm-generic/qspinlock.h:112 [inline] do_raw_spin_lock+0x12b/0x2f0 kernel/locking/spinlock_debug.c:116 spin_lock include/linux/spinlock.h:347 [inline] advance_sched+0xc2/0xc80 net/sched/sch_taprio.c:931 __run_hrtimer kernel/time/hrtimer.c:2074 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2131 hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2250 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:csd_lock_wait kernel/smp.c:363 [inline] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 kernel/smp.c:1002 Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 27 4b 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 12 46 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 f8 45 0c 00 RSP: 0018:ffffc900050a6460 EFLAGS: 00000293 RAX: ffffffff81bba538 RBX: ffff8880b8643708 RCX: ffff888027f83e80 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900050a65b0 R08: ffff88807fa179c7 R09: 1ffff1100ff42f38 R10: dffffc0000000000 R11: ffffffff8179dc60 R12: 1ffff110170c86e1 R13: dffffc0000000000 R14: 1ffff11004ff0a83 R15: 0000000000000000 __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x8ff/0x1090 arch/x86/mm/tlb.c:1435 flush_tlb_page arch/x86/include/asm/tlbflush.h:352 [inline] ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:104 page_vma_mkclean_one+0x4b9/0x840 mm/rmap.c:1146 page_mkclean_one+0x20c/0x2e0 mm/rmap.c:1194 __rmap_walk_file+0x4cd/0x6a0 mm/rmap.c:3120 rmap_walk mm/rmap.c:3164 [inline] folio_mkclean+0x2d5/0x3f0 mm/rmap.c:1226 folio_clear_dirty_for_io+0x190/0x820 mm/page-writeback.c:2903 mpage_submit_folio+0x83/0x2a0 fs/ext4/inode.c:2075 mpage_map_and_submit_buffers fs/ext4/inode.c:2331 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2515 [inline] ext4_do_writepages+0x203d/0x4770 fs/ext4/inode.c:2938 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3032 do_writepages+0x338/0x560 mm/page-writeback.c:2560 __writeback_single_inode+0x136/0x1220 fs/fs-writeback.c:1803 writeback_sb_inodes+0x9de/0x1b00 fs/fs-writeback.c:2114 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2190 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2301 wb_check_old_data_flush fs/fs-writeback.c:2405 [inline] wb_do_writeback fs/fs-writeback.c:2484 [inline] wb_workfn+0xc92/0x10f0 fs/fs-writeback.c:2512 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread timer wakeup didn't happen for 9225 jiffies! g17669 f0x0 RCU_GP_WAIT_FQS(5) ->state=I rcu: Possible timer handling issue on cpu=0 timer-softirq=5574 rcu: rcu_preempt kthread starved for 9226 jiffies! g17669 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 5670 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:csd_lock_wait kernel/smp.c:363 [inline] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 kernel/smp.c:1002 Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 27 4b 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 12 46 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 f8 45 0c 00 RSP: 0018:ffffc9000435f560 EFLAGS: 00000293 RAX: ffffffff81bba538 RBX: ffff8880b87414c8 RCX: ffff888079d48000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000435f6b0 R08: ffffffff907a627f R09: 1ffffffff20f4c4f R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: 1ffff110170e8299 R13: dffffc0000000000 R14: 1ffff1100f3a92b3 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3f58c0be80 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x8ff/0x1090 arch/x86/mm/tlb.c:1435 tlb_flush arch/x86/include/asm/tlb.h:23 [inline] tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:509 [inline] tlb_flush_mmu+0x1af/0xa30 mm/mmu_gather.c:423 tlb_finish_mmu+0xf4/0x220 mm/mmu_gather.c:549 free_ldt_pgtables+0x192/0x360 arch/x86/kernel/ldt.c:411 arch_exit_mmap arch/x86/include/asm/mmu_context.h:229 [inline] exit_mmap+0x1bf/0x9f0 mm/mmap.c:1300 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x18e/0x240 kernel/exit.c:592 do_exit+0x6cd/0x2360 kernel/exit.c:974 do_group_exit+0x22d/0x2f0 kernel/exit.c:1129 __do_sys_exit_group kernel/exit.c:1140 [inline] __se_sys_exit_group kernel/exit.c:1138 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1138 x64_sys_call+0x18c6/0x18d0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3f584f16c5 Code: Unable to access opcode bytes at 0x7f3f584f169b. RSP: 002b:00007ffcc1e34c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00005556b12554d0 RCX: 00007f3f584f16c5 RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 RBP: 00005556b1232910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcc1e34c60 R14: 0000000000000000 R15: 0000000000000000 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=7fc4/1/0x4000000000000000 softirq=17445/17445 fqs=1 rcu: (detected by 0, t=12680 jiffies, g=17669, q=472 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 1013 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: writeback wb_workfn (flush-8:0) RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:146 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x24b/0x2c0 mm/kasan/generic.c:200 Code: 0f 85 82 00 00 00 49 c1 ef 30 bb 07 00 00 00 45 84 ff 75 7d 4d 01 f3 49 01 db 4d 89 dc 4d 85 db 74 84 4d 01 d1 4d 39 cc 75 11 <41> 83 e0 07 45 0f be 09 45 39 c8 0f 8c 6b ff ff ff 0f b6 d2 e8 3c RSP: 0018:ffffc90000a18c08 EFLAGS: 00000046 RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81a3ebfb RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a18c80 RBP: ffffc90000a18ce8 R08: ffffc90000a18c83 R09: fffff52000143190 R10: dffffc0000000000 R11: fffff52000143190 R12: fffff52000143190 R13: ffff8880282662b0 R14: fffff52000143191 R15: 1ffff92000143190 FS: 0000000000000000(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005556b123ba38 CR3: 000000007f2dc000 CR4: 00000000003526f0 Call Trace: instrument_read_write include/linux/instrumented.h:55 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1301 [inline] queued_spin_lock include/asm-generic/qspinlock.h:112 [inline] do_raw_spin_lock+0x12b/0x2f0 kernel/locking/spinlock_debug.c:116 spin_lock include/linux/spinlock.h:347 [inline] advance_sched+0xc2/0xc80 net/sched/sch_taprio.c:931 __run_hrtimer kernel/time/hrtimer.c:2074 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2131 hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2250 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:csd_lock_wait kernel/smp.c:363 [inline] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 kernel/smp.c:1002 Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 27 4b 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 12 46 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 f8 45 0c 00 RSP: 0018:ffffc900050a6460 EFLAGS: 00000293 RAX: ffffffff81bba538 RBX: ffff8880b8643708 RCX: ffff888027f83e80 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900050a65b0 R08: ffff88807fa179c7 R09: 1ffff1100ff42f38 R10: dffffc0000000000 R11: ffffffff8179dc60 R12: 1ffff110170c86e1 R13: dffffc0000000000 R14: 1ffff11004ff0a83 R15: 0000000000000000 __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x8ff/0x1090 arch/x86/mm/tlb.c:1435 flush_tlb_page arch/x86/include/asm/tlbflush.h:352 [inline] ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:104 page_vma_mkclean_one+0x4b9/0x840 mm/rmap.c:1146 page_mkclean_one+0x20c/0x2e0 mm/rmap.c:1194 __rmap_walk_file+0x4cd/0x6a0 mm/rmap.c:3120 rmap_walk mm/rmap.c:3164 [inline] folio_mkclean+0x2d5/0x3f0 mm/rmap.c:1226 folio_clear_dirty_for_io+0x190/0x820 mm/page-writeback.c:2903 mpage_submit_folio+0x83/0x2a0 fs/ext4/inode.c:2075 mpage_map_and_submit_buffers fs/ext4/inode.c:2331 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2515 [inline] ext4_do_writepages+0x203d/0x4770 fs/ext4/inode.c:2938 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3032 do_writepages+0x338/0x560 mm/page-writeback.c:2560 __writeback_single_inode+0x136/0x1220 fs/fs-writeback.c:1803 writeback_sb_inodes+0x9de/0x1b00 fs/fs-writeback.c:2114 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2190 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2301 wb_check_old_data_flush fs/fs-writeback.c:2405 [inline] wb_do_writeback fs/fs-writeback.c:2484 [inline] wb_workfn+0xc92/0x10f0 fs/fs-writeback.c:2512 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread timer wakeup didn't happen for 9225 jiffies! g17669 f0x0 RCU_GP_WAIT_FQS(5) ->state=I rcu: Possible timer handling issue on cpu=0 timer-softirq=5574 rcu: rcu_preempt kthread starved for 9226 jiffies! g17669 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 5670 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:csd_lock_wait kernel/smp.c:363 [inline] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 kernel/smp.c:1002 Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 27 4b 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 12 46 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 f8 45 0c 00 RSP: 0018:ffffc9000435f560 EFLAGS: 00000293 RAX: ffffffff81bba538 RBX: ffff8880b87414c8 RCX: ffff888079d48000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000435f6b0 R08: ffffffff907a627f R09: 1ffffffff20f4c4f R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: 1ffff110170e8299 R13: dffffc0000000000 R14: 1ffff1100f3a92b3 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3f58c0be80 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x8ff/0x1090 arch/x86/mm/tlb.c:1435 tlb_flush arch/x86/include/asm/tlb.h:23 [inline] tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:509 [inline] tlb_flush_mmu+0x1af/0xa30 mm/mmu_gather.c:423 tlb_finish_mmu+0xf4/0x220 mm/mmu_gather.c:549 free_ldt_pgtables+0x192/0x360 arch/x86/kernel/ldt.c:411 arch_exit_mmap arch/x86/include/asm/mmu_context.h:229 [inline] exit_mmap+0x1bf/0x9f0 mm/mmap.c:1300 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x18e/0x240 kernel/exit.c:592 do_exit+0x6cd/0x2360 kernel/exit.c:974 do_group_exit+0x22d/0x2f0 kernel/exit.c:1129 __do_sys_exit_group kernel/exit.c:1140 [inline] __se_sys_exit_group kernel/exit.c:1138 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1138 x64_sys_call+0x18c6/0x18d0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3f584f16c5 Code: Unable to access opcode bytes at 0x7f3f584f169b. RSP: 002b:00007ffcc1e34c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00005556b12554d0 RCX: 00007f3f584f16c5 RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 RBP: 00005556b1232910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcc1e34c60 R14: 0000000000000000 R15: 0000000000000000