Extracting prog: 13m40.831563814s Minimizing prog: 1h26m35.496575086s Simplifying prog options: 5m12.310419041s Extracting C: 2m37.592861348s Simplifying C: 0s 30 programs, 3 VMs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-unshare-semget$private-semctl$GETALL-mprotect detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/116) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-syz_open_dev$sg-fcntl$dupfd-ioctl$SG_IO detailed listing: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-openat$nullb-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-preadv2-ioctl$sock_SIOCGIFINDEX_80211-openat$vmci-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$NL80211_CMD_CONNECT-syz_80211_inject_frame-nanosleep-syz_open_dev$usbfs detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34343459}}) preadv2(r2, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000fbffffffffffff63000100000602020202020701058280960c18b0fef79ee476b0b895e36d0067135bd2ec1e951c3df1e3083e4ac025f10522a331b092771332005a9c7fc28fef250761903c26400cd31aee328090cf3ad395677a25c114a1c7db87140100000000000000"], 0x33) nanosleep(0x0, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY-ioctl$sock_inet6_SIOCADDRT-syz_usb_ep_write$ath9k_ep2 detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000240)=ANY=[]) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_io_uring_setup-syz_io_uring_setup-socketpair$unix-syz_io_uring_submit-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$TEAM_CMD_OPTIONS_SET-ioctl$TUNSETIFF-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_open_dev$MSR-sched_setscheduler-read$msr-close-socket$nl_route-add_key$keyring-add_key$keyring-openat$sndtimer-ppoll-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-sendmmsg$unix-syz_open_dev$tty20-setsockopt$sock_attach_bpf-ioctl$TCFLSH detailed listing: executing program 0: r0 = syz_io_uring_setup(0x2972, &(0x7f0000000140)={0x0, 0x98fd, 0x200, 0x2}, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r4}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$TCFLSH(r7, 0x5608, 0x3) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 24, 25, 2, 25, 26, 29, 7, 7, 14, 29, 20, 2, 4, 8, 1, 21, 3, 7, 12, 10, 4, 2, 3, 23, 4, 7, 1, 5, 7] detailed listing: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2cc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x24c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1c4, 0x6, [@m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_connmark={0x84, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x36, 0x6, "984c8de4271b3990d6299d27298de61079d98fc9ca01dced68c813be4df100b510345fb96d6b00"/50}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2cc}}, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x6c, r4, 0x213, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) io_uring_setup(0x16a5, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000bc0), 0x20000000}, 0x20) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x83b1, 0x0) syncfs(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020009006000000002000020d3"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffff6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1001) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xfffffffffffffd03) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000787a9069c3fa42b497295dfa70c42ab27eea9ef8cb25381dc2b9d4c15c351c1678c16ecbb6a04090195c19168bbad097b806e2c56e23550937e137885c2e1309e10fbb50b86dce28038ebf523f6d7e579eb74186cadf3843cf8616e235ca980a975d21c3ea669dd3a51aa40beb98eb7c98b21c3d9bfd3508cf9bbc5a95da34", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0xa, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x1}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000700)={0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4bf2035866facfb2}) executing program 4: pipe2(&(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0xfffffffc, 0x4}) getpid() connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000280)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="6c0000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\\'], 0x6c}}, 0x0) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x0, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r9 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = syz_io_uring_setup(0x2972, &(0x7f0000000140)={0x0, 0x98fd, 0x200, 0x2}, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r4}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$TCFLSH(r7, 0x5608, 0x3) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@private=0xa010100, 0xb}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010101}, {@empty, 0x52b1}]}, @noop, @noop, @rr={0x7, 0x7, 0x0, [@remote]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfa}, 0x20) gettid() executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073"], 0x64}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x18000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xba, 0x0, &(0x7f0000000280)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@private=0xa010100, 0xb}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010101}, {@empty, 0x52b1}]}, @noop, @noop, @rr={0x7, 0x7, 0x0, [@remote]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfa}, 0x20) gettid() executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000240)=ANY=[]) executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x1411, 0x7aaf78d1ad25cf3d, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x4004662b, &(0x7f0000000240)) executing program 1: futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='macvtap0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x21383ea572ffcad8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(r0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611290000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) io_uring_setup(0x7853, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) executing program 0: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="1bea74927a9e0d6312109442472d4be4e702721ba44b17e01e296f8c193d05e641aab270a06378eeed70df0783e9bbef0b6942a8268d05cefb4360b9368ce80b194d053e84c133c88179db99013035847a27b3ea9435d561fe2d941abb1bc849410c61eb533ae4c49df267bdc46ee200", 0x70}, {&(0x7f0000000600)="226dfb98b640244f515fcb688f5ef0a8d0c7a2864a17fd9ee59384bedfb72a66a2f0ded52cdbff4b6ef02883677024d845e07a6cde6420d1618fc12e6743268e3561d3c324c1b91804e0cd7f1342379c2c8a0a9a41e9b0ae32846e885bc2edcc41f4885b090f1a665f8dc9ded00c01c0fbf961cb0c331f629aff610b8d5f6bbcbe0aa2d1a482cf1435e80d32a8c1b78d2dfa6de7e2ce53c3ed9a12de5322ae69430b7fcd7877b9f1b17e6bc117c0b1fa4a9f0b2419f69c5747714dec65a9cc33ea0f6fd6029f4fc9f6a1c20dea7ec3807561c3272f359267497e34de3d4db3f0c85820b9e22c8522b9a1cf45953bbe79c311a12c592f2c4a2dcda549a291dee70135ea92945414612357a96ac2307b58254e4e74716f50cdb237e01d3d16cd8d440c64cc765f83898aa9e7f675dfe8182c63f6886f54a6258e8b33dff042607add9c37068fad5cd2e49b4ba926eeb52949ffc2bae242b1e3be0b54e1a507e50a3137c90650ff0e223af2ad20f1b87194535e18bd89d332ac7972d2bb509a6c996405df9df50f8ecd5d94206904f4c9d8e4ef018c40ddb5831d6d9a5b02523364f223edde2032f9f3e8104346e5619d9841e0f703eea3dc34e06c619340b8911f6a99aac4ab5fee20d3cba5c9696caf15148a9235b24320f4980dbfbf5a07a66ad54a9d6aae623a98d83342bfab081bd439ff49bbe6b1a95ada1adb0dd1382c351726c6e56d438e855415d21f25e483189a4aada38af59cdb66efa302ce7dfbdd1f49d14528dccba8b4fb0bdcdb2ba36a5330ba0f9d9e97ba467717bb8296ed5f6f92d77beb8380a5aeae86e76d0cb2f72806f3517633e9d8f7e49f1be50b37d897459778fa079103428974e33f95b0b6d2d4be131e4e9ef4b6bfb18cd81b1f148432344498891ea19ca2f53a2c7573b179df72be0115e0f05d1ec287ad2a83fe39b7b3254df9f5b963eaedae9e3aee5feefdbd2ec7d0e02c7856989f09d32dde8cca3b001309093bc1aa4b329f41788d18cc64b6f8cbc2881f34d73329d5286e1fb65b37b8825856dda53f68801294d3654331803802252733eb1295e15a715ee0b8ccc1329fa25bd945dcf3cd823376d5234adfdc099bd6f7a20137c9f1186d280920b043dabe937d28fd8d8091fe703fe371007abb431526e8da492a8e1c6cc373ea9d3c22c1515b15bcacf6410fb17110be31ab18cdae7353f828784bf3b32d129888a68b940d2fa14f614b61645d26e5b909e74bd5443a23a7b1f90d23f4c237a13572a1d8289d9eb5276cc1334b787abaa3993faead2cd081e67c8cf0504eb1e6026b5de8c58ca8c7e9766354ccfdfb719667ffdcb4c5b7cc93b684452097b7030e2ed6f31b1f257789577a67813da487c5d446b583ad93659ccd0cdadd92f7695ac587991f1c409edb28f2ad0c5d20439c156d0575c4780042bab37686f6532152b232f50e387731f7f77ef2b33fd8bcbb640ed483c83bd81dab5fa19d0f7fe7f53fca2a6ea29d6b6ba379072cf8bb3fd3f463ce56a03de7579426fcd4badc4d2062b5531c4969a786524563556c0c2fd04fe67d9b6c37238ee5237727d737f62b753a9d22c345731d0dfb648efedab6237d4367fafdd2a31edf473f84a6f82ae2e5b3f3893f460082dd9d7877257d463ed40a5b1e9fb55938bd5a20a3de4ff5a62619e55c5bb2b7eef22e83185642035c355535e0aa2bc3adf5ae3beb1294746c9df9031f3e399b0c28663a17f456ca215ccccaaadad1b24fa5778febb371e9204ef2e75225a3cd921140be54bc05b66a6fa678f63ddfc84c05abf0e7c3114691960b266960b1269f7ca9136583b481e922925f6e65d0163aca245d7f7d7bd9d0c56e4a952d136d785e23ecb9697435e0c102534aa279d09540cbe726e354f3f7564cbaacfce0a5676a29fa6217ec5c862288dd86075bff88e0c3a4440e38cd6270f24156e1482af110189a4c4a2117d235101095c4c47c3d0f26698d971f8bf9fd3cd6e423fa6024afdeb87e6718f8a59d28c919711a902a11fa0a3bea0f1a8261955cb6345c61507acc0b92b39c80a1bef4c758b054db2f3ae5e2b02befcaaae8ca636582fa8d0f0e590b62d1cc9d5bb7723d3d43e6eb94194c5bfd4f958b3dc334f5684890f81f10d9c307666e15835ffd9f1322a789491f01910c06a30721c8586c049e05c83eaf5a78ede335a7ad9073bfeb202c44dc23c1c9aa1d87c3b0bf16ad7f93dd5a6db531a59a240540ad167af1f72893af3b8439017fb1d2cefb675a21708a4154f987eed8454727f108655bc27e24fc22601be0aff1b5393e0fb9189715fe3852f607d277e41ccbf4327144750991b965d550b2b6aacb3217579d5f7eb232303020b616536248d7f37f5dcc9377220a52f54bacb2735bb5385b5af145128319a0e270754f764719e06968de31c8ed57ea4773f1f4e3c9a9c7f5db5c168b9d2471e92b9f74e08be11248ed4fc5603825186d564dddb25afbaf830faafc7d844369c83191c3807a95d45f481f53951da2c9b679317ca1575c143b9c445afbc6da957c78a21ae74e0a003c77fd39162f62b2bdedeb458a8257a145a79492fe25bb386d435ed9be00e7a91f7c8ac08850462dffe5451d590c0d258ea0fdcd179bf625c17b428ebe84673d3ea2df515f4f528d5aa477d59c568db887138bc5222f4b9c9f092e4533a6372261a11886fde514731d1a6451f45ff59bb9a0bbdaa21dff31c4f93c6b201e0112d959f0aa212b03c571ec9e3d37b73bcf49cc17798f57c772bc1e450ec95fb83b5be437784c6e82a281a615b95eae157b515baa3413101748fb600e3e3e05e17cfd06ebf1db501a61810f952c0b0017db1084c334e85a994ac84b0ecc44cb52a14cabd8c46d98146d7ac23bccae90951835f5a4d687f17ff3438385c32f3dd8fdd330649c0a4fa10ad0615a5345d719b4e807da63bb10bc71c117f94d165620b258b8e4d1d6e4105051b99e5b28548b256d5472f2091949653ed8a84d83c72190858c4011efbe254044c30c4f95618b8905970ee3f06518913cb41c65b8d1fe3b49fad277e54e7327c061d3d862bb69e7e2774f971ada4082294ec0ff76fa9fa3b13492b20336cd3ab5fefabc1df2edfd7a337b6034627ffc4d5fc5e3855ea84334a58e969e8c7a288e9cce36c3039ec7f5737b4c7685c178a9541df9d529a347ec96d1b3c6cc76ed99ad16b80a711d39195d849d240b803a189762f774e3f39638dd183b56f3ac8e9574fd8128f904aefb3ef1eb478738f7deef12b114c870ff8113276cc3dfdbc7673577698dd905ced82f46ef3a2fc18a366fd63bdf27ea62a237cc3a9be1292ac70ff4aba71205a3c203b46256194dd882e27d1ed6be28eb6d8ca80710ace2ffdf6f5549a4dfdc5d2dcae63cd7ca54a1b8e7def49e9f61c80003d025135217d67e27faa7e80f7343e2dd8dd19da186e06b1e3b91d94a6489646d38d7e860073f676e6c190b84202e43af01a94ef95b8fb5f88cb84085302b9f5985dbb086efd9a1c535613a12172f57c06ab0c5e9281931bce202dcfa26ff690efa79328bf9de920ea61258cbc45ce8a87074d1c5fe3be6d61936d60b83f6920a07a5c927d1f127b7d59aafb0b23c635056a7921e6569addb82c7e1e1355f9233b73d59ca29ba9df3a970602944c15b2b483a7ddb28d6277574b56e6f5502d4c42121405491429acb9ce13bf602fae6666bb595352bf175d6dc3976fab4524f9bc822fa6b86c89bbdae2cae6cd75ee011622ff8909f2682643385867cddaf8d9267f18c79d42503123b23cbb75449d0db668c35cfc3d9ed777511fd08c2ccfbc7af63b5adf2d89a097a64e56470d1ded66042f132c645180fbbefe12c15a5ba84c0f0687339a052c2472119cc0f35c2ad3d7540c8172c8ebd2aed33384e61292a3750fe3911e87b059545be46e20977b9a51453730d222d530d1c0cf86e76907a5b73aa9effb439e0923629c409fd2a0e6a3c0849231e50ec9a5af857f4e6e2f1e6f4330c46f3067c1146ca7fa92bd30e802ec31a42d20ebbec7f9a047131572cdf0e06f3c9c1843e2d7e268ca86f605862452dc08faadafcc311c52e8d3ad8fea1c2a842c3c165735804337aa9af9140860fa9336265b7ad6fc3f51f6b5872077e260fd457075bf9cdc15e8c4ab5ded482a2204d040a95d94e1a4ab51af6819d15026d5efa8be8e2231c2303ac84d0af29067c028574ba182851220e50dd5e86dd71eed331a5b56d5960cfbd894270a0c098bbbd15f18830b6e5c17b940f3993d250c8579e9654886512fda67b303fb7fbd4f2851a7c07b6966f9022cf4676af918e745bb27490996c18a02c26b2259224a96c062db5acc599d3bc5aefa857afe91ac2f723c4e3864dd56d10864ba74ca2acde5c2678b0e97fee41f17f1339cd88b2b9bcf9d5e0b4cd454b5f605ad9c8a1b0d4042faf979d75048aaa823b7968fe2b6cfeb2b761af9772c1786bf18a2ea634e00eab719ce83b3ae669da3ce3497ee0dad2ed0058611ed0ed39e1c783ba41fb0237ab7f7ccfaf3c30b48f1f7afff5c2f6b2909ed631bb89114db0005ded52ab3799506f62c41b9a17d756fb1f98d2237103ca21326944d6bdf96c30efc0b6d6018ef9b409e9f3e0dcac6d17d5d8914c118fe21804c354829d15c464eba01f08208c308b0dc999631bbf7377f8ef1ab082e45db585811a7cd400f4ad1dd6f282c03ba0cb844c884e44b5d2e136e5828c1da6a68078f4e7b39fcb8fb255942529e3da24b1820e73810dbb72b075de9ca1e6ef44a27d462e3d3423faf6ccdfe1db25c6de2628edd0d93dbad5f1d4343b4b4fd4b968902ad49fc893a8ad49e3a40674901d03a3fb0990c9b55f4ee27123d9402701b1edae2e05ba9094ad4b637741fb1ca4fbbb45e0b8d45e6b39f462c948efcbf92fbeaa4ed6c8d923ef77dc442383865c6a9b994280b89f8888fffeaffbedfb5ab5e3bac94e14c087e73ca6a87b56d46882cea12c39f62951df386de6c5ab599655aed7aa516c27624beb587ab29a159a77f152de9f38b70c460100a28c671a18196d31e6bd66c744432621f596b3085818cdadd23d8a24", 0xe11}], 0x2}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x40}}, 0x0) executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x1411, 0x7aaf78d1ad25cf3d, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xeb83, 0x0, 0x6, 0x0, @loopback, @multicast2}}}}}}, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34343459}}) preadv2(r2, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000fbffffffffffff63000100000602020202020701058280960c18b0fef79ee476b0b895e36d0067135bd2ec1e951c3df1e3083e4ac025f10522a331b092771332005a9c7fc28fef250761903c26400cd31aee328090cf3ad395677a25c114a1c7db87140100000000000000"], 0x33) nanosleep(0x0, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0) executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0x2020) executing program 2: futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/116) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-unshare-semget$private-semctl$GETALL-mprotect detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/116) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-syz_open_dev$sg-fcntl$dupfd-ioctl$SG_IO detailed listing: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-openat$nullb-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-preadv2-ioctl$sock_SIOCGIFINDEX_80211-openat$vmci-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$NL80211_CMD_CONNECT-syz_80211_inject_frame-nanosleep-syz_open_dev$usbfs detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34343459}}) preadv2(r2, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000fbffffffffffff63000100000602020202020701058280960c18b0fef79ee476b0b895e36d0067135bd2ec1e951c3df1e3083e4ac025f10522a331b092771332005a9c7fc28fef250761903c26400cd31aee328090cf3ad395677a25c114a1c7db87140100000000000000"], 0x33) nanosleep(0x0, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY-ioctl$sock_inet6_SIOCADDRT-syz_usb_ep_write$ath9k_ep2 detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000240)=ANY=[]) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 20 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY-ioctl$sock_inet6_SIOCADDRT detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) program crashed: INFO: rcu detected stall in corrupted testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program crashed: INFO: rcu detected stall in addrconf_rs_timer testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-socket$igmp detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) socket$igmp(0x2, 0x3, 0x2) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-syz_usb_ep_write$ath9k_ep2-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program crashed: INFO: rcu detected stall in corrupted testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780), 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program crashed: INFO: rcu detected stall in addrconf_rs_timer testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-socket$packet-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) socket$packet(0x11, 0x3, 0x300) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program crashed: INFO: rcu detected stall in corrupted testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-socket$inet6_icmp_raw-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-syz_usb_ep_write$ath9k_ep2-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program crashed: INFO: rcu detected stall in addrconf_rs_timer testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r2}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r2}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r2}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, 0x0, 0x0, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0), 0x0, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) failed to boot instance (try 1): failed to create VM: can't ssh into the instance failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.0.4" "pwd"]: exit status 255 ssh: connect to host 10.128.0.4 port 22: Connection timed out Pseudo-terminal will not be allocated because stdin is not a terminal. Warning: Permanently added '[us-central1-ssh-serialport.googleapis.com]:9600' (RSA) to the list of known hosts. syzkaller.us-central1-c.ci-upstream-kasan-gce-smack-root-4.syzkaller.port=1.replay-lines=10000@us-central1-ssh-serialport.googleapis.com: Permission denied (publickey). program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY program did not crash simplifying guilty program options testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-open$dir-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-openat$vhost_vsock-ioctl$VHOST_SET_VRING_BASE-ioctl$VHOST_SET_VRING_ADDR-ioctl$EVIOCSCLOCKID-socket$inet6_icmp_raw-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$sock_inet6_SIOCADDRT-setsockopt$packet_fanout-socket$igmp-setsockopt$MRT_ADD_MFC_PROXY detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000780), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c) program did not crash reproducing took 1h48m6.231442433s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3285 jiffies s: 3473 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 5272 Comm: kworker/1:6 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 kernel/kcov.c:303 Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 80 d4 03 00 65 8b 05 70 a9 RSP: 0018:ffffc90000a176e0 EFLAGS: 00000046 RAX: 0000000000010303 RBX: 0000000000000003 RCX: ffffffff87130a66 RDX: ffff8880239d8000 RSI: 0000000000000003 RDI: 0000000000000000 RBP: ffff88806fe04848 R08: ffffffff87130a7c R09: 1ffff1100f40b200 R10: dffffc0000000000 R11: ffffed100f40b201 R12: dffffc0000000000 R13: ffff88807a059028 R14: ffff88806fe04848 R15: ffff88807a059000 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f40fb54f095 CR3: 000000000e132000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:274 [inline] __refcount_dec_and_test include/linux/refcount.h:307 [inline] refcount_dec_and_test include/linux/refcount.h:325 [inline] kref_put include/linux/kref.h:64 [inline] usb_free_urb drivers/usb/core/urb.c:97 [inline] __usb_unanchor_urb+0x1af/0x2e0 drivers/usb/core/urb.c:154 usb_unanchor_urb+0x7d/0xc0 drivers/usb/core/urb.c:184 __usb_hcd_giveback_urb+0x2a6/0x6e0 drivers/usb/core/hcd.c:1637 dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_preemption_disabled+0x42/0x120 lib/smp_processor_id.c:55 Code: 08 65 8b 1d 6c 80 86 74 65 8b 05 61 80 86 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 RSP: 0018:ffffc90000a17ea8 EFLAGS: 00000246 RAX: 3862807e2dd3a500 RBX: 0000000000000001 RCX: ffffffff81728db0 RDX: 0000000000000000 RSI: ffffffff8c1f15a0 RDI: ffffffff8c1f1560 RBP: ffffc90000a18030 R08: ffffffff8fac1d2f R09: 1ffffffff1f583a5 R10: dffffc0000000000 R11: fffffbfff1f583a6 R12: 1ffff92000142fec R13: ffffffff8a24fdee R14: 0000000000000000 R15: dffffc0000000000 rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline] rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:724 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0xbf/0x9f0 kernel/locking/lockdep.c:5765 rcu_lock_release include/linux/rcupdate.h:339 [inline] rcu_read_unlock include/linux/rcupdate.h:812 [inline] ip6_link_failure+0x3d6/0x4f0 net/ipv6/route.c:2819 dst_link_failure include/net/dst.h:429 [inline] ip6_tnl_xmit+0xf86/0x2970 net/ipv6/ip6_tunnel.c:1282 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1398 [inline] ip6_tnl_start_xmit+0xb92/0x1430 net/ipv6/ip6_tunnel.c:1446 __netdev_start_xmit include/linux/netdevice.h:4882 [inline] netdev_start_xmit include/linux/netdevice.h:4896 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x27a/0x7e0 net/core/dev.c:3594 __dev_queue_xmit+0x1b0e/0x3d30 net/core/dev.c:4393 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0xff8/0x1670 net/ipv6/ip6_output.c:137 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:222 NF_HOOK include/linux/netfilter.h:314 [inline] ndisc_send_skb+0xab0/0x1380 net/ipv6/ndisc.c:509 addrconf_rs_timer+0x36e/0x660 net/ipv6/addrconf.c:4039 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1843 [inline] __run_timers kernel/time/timer.c:2417 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428 run_timer_base kernel/time/timer.c:2437 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 82 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 8c dd f5 65 8b 05 04 c4 7b 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc9000364ebe0 EFLAGS: 00000206 RAX: 3862807e2dd3a500 RBX: 1ffff920006c9d80 RCX: ffffffff8172d97a RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 RBP: ffffc9000364ec70 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: dffffc0000000000 R13: 1ffff920006c9d7c R14: ffffc9000364ec00 R15: 0000000000000246 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline] debug_check_no_obj_freed+0x561/0x580 lib/debugobjects.c:1019 slab_free_hook mm/slub.c:2163 [inline] slab_free mm/slub.c:4438 [inline] kfree+0x10f/0x360 mm/slub.c:4559 kobject_uevent_env+0x545/0x8e0 lib/kobject_uevent.c:624 really_probe+0x7f4/0xad0 drivers/base/dd.c:706 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:956 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1028 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:656 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:956 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1028 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6a/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3285 jiffies s: 3473 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 5272 Comm: kworker/1:6 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 kernel/kcov.c:303 Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 80 d4 03 00 65 8b 05 70 a9 RSP: 0018:ffffc90000a176e0 EFLAGS: 00000046 RAX: 0000000000010303 RBX: 0000000000000003 RCX: ffffffff87130a66 RDX: ffff8880239d8000 RSI: 0000000000000003 RDI: 0000000000000000 RBP: ffff88806fe04848 R08: ffffffff87130a7c R09: 1ffff1100f40b200 R10: dffffc0000000000 R11: ffffed100f40b201 R12: dffffc0000000000 R13: ffff88807a059028 R14: ffff88806fe04848 R15: ffff88807a059000 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f40fb54f095 CR3: 000000000e132000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:274 [inline] __refcount_dec_and_test include/linux/refcount.h:307 [inline] refcount_dec_and_test include/linux/refcount.h:325 [inline] kref_put include/linux/kref.h:64 [inline] usb_free_urb drivers/usb/core/urb.c:97 [inline] __usb_unanchor_urb+0x1af/0x2e0 drivers/usb/core/urb.c:154 usb_unanchor_urb+0x7d/0xc0 drivers/usb/core/urb.c:184 __usb_hcd_giveback_urb+0x2a6/0x6e0 drivers/usb/core/hcd.c:1637 dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_preemption_disabled+0x42/0x120 lib/smp_processor_id.c:55 Code: 08 65 8b 1d 6c 80 86 74 65 8b 05 61 80 86 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 RSP: 0018:ffffc90000a17ea8 EFLAGS: 00000246 RAX: 3862807e2dd3a500 RBX: 0000000000000001 RCX: ffffffff81728db0 RDX: 0000000000000000 RSI: ffffffff8c1f15a0 RDI: ffffffff8c1f1560 RBP: ffffc90000a18030 R08: ffffffff8fac1d2f R09: 1ffffffff1f583a5 R10: dffffc0000000000 R11: fffffbfff1f583a6 R12: 1ffff92000142fec R13: ffffffff8a24fdee R14: 0000000000000000 R15: dffffc0000000000 rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline] rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:724 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0xbf/0x9f0 kernel/locking/lockdep.c:5765 rcu_lock_release include/linux/rcupdate.h:339 [inline] rcu_read_unlock include/linux/rcupdate.h:812 [inline] ip6_link_failure+0x3d6/0x4f0 net/ipv6/route.c:2819 dst_link_failure include/net/dst.h:429 [inline] ip6_tnl_xmit+0xf86/0x2970 net/ipv6/ip6_tunnel.c:1282 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1398 [inline] ip6_tnl_start_xmit+0xb92/0x1430 net/ipv6/ip6_tunnel.c:1446 __netdev_start_xmit include/linux/netdevice.h:4882 [inline] netdev_start_xmit include/linux/netdevice.h:4896 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x27a/0x7e0 net/core/dev.c:3594 __dev_queue_xmit+0x1b0e/0x3d30 net/core/dev.c:4393 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0xff8/0x1670 net/ipv6/ip6_output.c:137 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:222 NF_HOOK include/linux/netfilter.h:314 [inline] ndisc_send_skb+0xab0/0x1380 net/ipv6/ndisc.c:509 addrconf_rs_timer+0x36e/0x660 net/ipv6/addrconf.c:4039 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1843 [inline] __run_timers kernel/time/timer.c:2417 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428 run_timer_base kernel/time/timer.c:2437 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 82 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 8c dd f5 65 8b 05 04 c4 7b 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc9000364ebe0 EFLAGS: 00000206 RAX: 3862807e2dd3a500 RBX: 1ffff920006c9d80 RCX: ffffffff8172d97a RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 RBP: ffffc9000364ec70 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: dffffc0000000000 R13: 1ffff920006c9d7c R14: ffffc9000364ec00 R15: 0000000000000246 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline] debug_check_no_obj_freed+0x561/0x580 lib/debugobjects.c:1019 slab_free_hook mm/slub.c:2163 [inline] slab_free mm/slub.c:4438 [inline] kfree+0x10f/0x360 mm/slub.c:4559 kobject_uevent_env+0x545/0x8e0 lib/kobject_uevent.c:624 really_probe+0x7f4/0xad0 drivers/base/dd.c:706 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:956 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1028 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:656 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:956 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1028 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6a/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244